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Abstract: 

The thesis developed here is that reasoning programs which take care to record 
the logical justifications for program beliefs can apply several powerful, but simple, domain- 
independent algorithms to 

{1} maintain the consistency of program beliefs, 

{2} realize substantial search efficiencies, and 

{3} automatically summarize explanations of program beliefs. 
These algorithms use the recorded justifications to maintain the consistency and well- 
founded basis of the set of beliefs. The set of beliefs can be efficiently updated in an 
incremental manner when hypotheses are retracted and when new information is discovered. 
The recorded justifications also enable the pinpointing of exactly those assumptions which 
support any particular belief. The ability to pinpoint the underlying assumptions is the 
basis for an extremely powerful domain-independent backtracking method. This method, 
called Dependency-Directed Backtracking, offers vastly improved performance over 
traditional backtracking algorithms. 

These techniques of recording and using justifications also indicate methods for 
structuring the deductive process so that the justification-derived arguments for certain 
types of deductions can be automatically summarized. The levels of detail in a hierarchical 
problem solver can be separated from each other by this summarization. The separation is 
accomplished by replacing a set of beliefs at one level by the higher-level beliefs from which 
they derive. This is important in improving the coherence of explanations, and in further 
improving the search efficiency of dependency-directed backtracking. Modest extensions of 
this method are useful in automatically generalizing the results of certain forms of 
computations. 

This report describes techniques for representing, recording, maintaining and 
using justifications for beliefs. In addition, we present an annotated implementation of a 
domain-independent program making these functions easily available to programs in a wide 
range of applications. 
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I. Introduction 



A. Overview of the Report 

The thesis developed here is that reasoning programs which take care to record 
the logical justifications for program beliefs can apply several powerful, but simple, domain- 
independent algorithms to 

{1} maintain the consistency of program beliefs, 

{2} realize substantial search efficiencies, and 

{3} automatically summarize explanations of program beliefs. 
These algorithms use the recorded justifications to maintain the consistency and well- 
founded basis of the set of beliefs. The set of beliefs can be efficiently updated in an 
incremental manner when hypotheses are retracted and when new information is discovered. 
The recorded justifications also enable the pinpointing of exactly those assumptions which 
support any particular belief. The ability to pinpoint the underlying assumptions is the 
basis for an extremely powerful domain-independent backtracking method. This method, 
called Dependency-Directed Backtracking, offers vastly improved performance over 
traditional backtracking algorithms. 

These techniques of recording and using justifications also indicate methods for 
structuring the deductive process so that the justification-derived arguments for certain 



types of deductions can be automatically summarized. The levels of detail in a hierarchical 
problem solver can be separated from each other by this summarization. The separation is 
accomplished by replacing a set of beliefs at one level by the higher-level beliefs from which 
they derive. This is important in improving the coherence of explanations, and in further 
improving the search efficiency of dependency-directed backtracking. Modest extensions of 
this method are useful in automatically generalizing the results of certain forms of 
computations. 

This report describes techniques for representing, recording, maintaining and 
using justifications for beliefs. In addition, we present an annotated implementation of a 
domain-independent program making these functions easily available to programs in a wide 
range of applications. 

The first chapter of the report introduces the function and operation of the Truth 
Maintenance System (TMS). This is a particular domain-independent program embodying 
the techniques described in the remainder of this report. An example of problem solving 
using the TMS is presented to lend substance to the following discussion. 

The second chapter develops a new method for representing knowledge about 
beliefs. This representation, called a non-monotonic dependency system, is closely related to 
representations used in certain methods of natural deduction. It extends these 
representations by incorporating the ability to represent non-monotonic dependencies. Non- 



monotonic dependencies can be used to express certain forms of hypothetical assumptions, as 
well as ordinary deductions and conditional proofs. This representation is invaluable in 
maintaining the consistency of program beliefs in the presence of assumptions and in 
dependency-directed backtracking. The discussion then presents methods for using this 
representation in describing several common problem solving structures. These include 
default assumptions, sets of alternatives, and equivalence class representatives. Finally, a 
method for imposing a hierarchical structure of summarization on arguments for beliefs is 
described. 

The third chapter details the mechanisms behind the techniques of the preceding 
chapter. An important problem in using justifications to determine the set of current beliefs 
is the occurrence of circular proofs for beliefs. The solution of this problem requires the 
maintenance of well-founded support for all program beliefs. The chapter discusses this 
problem and the mechanism of truth maintenance used to incrementally derive well-founded 
support for beliefs following the addition of new justifications and the retraction of 
premises. Mechanisms for handling conditional proofs are then described. These involve a 
mechanization of the deduction theorem of mathematical logic to find the grounds for belief 
in an implication. Conditional proofs play a major role in the following presentation of the 
mechanism of dependency-directed backtracking. 

The final chapter provides a summary discussion of the key ideas developed in 
the report: the importance and uses of recorded justifications for beliefs. This summary is 



followed by discussions of the relation of this research to other work, and a list of topics for 
future research. 

Three appendices provide information on other topics. The first appendix 
contains a glossary of the concepts and terms employed in our discussion of truth 
maintenance systems. The second appendix outlines the structure and mechanisms of a 
related representational system, the monotonic dependency system. This representation 
allows a simplification of the algorithms used in truth maintenance over the corresponding 
algorithms used in the non-monotonic system. However, the monotonic system requires 
substantial additional complexities on the part of other algorithms. In particular, 
hypothetical assumptions and dependency-directed backtracking require other mechanisms 
for their implementation. The third appendix presents an annotated implementation of a 
version of the TMS program. 

Footnotes are indicated in this report by a superscript mnemonic. The notes 
themselves, indexed by these mnemonics, are located immediately preceding the references. 



10 
B. A Functional Description of the Truth Maintenance System 

The Truth Maintenance System is a program for recording knowledge about 
deductions. A reasoning program interacts with the TMS by distinguishing a set of 
program structures as describing the set of program beliefs. These structures are typically 
those derived by program operation, and then used to derive further such structures. For 
instance, the set of assertions and procedures in a PLANNER-like data base may be taken 
as the set of program beliefs. The TMS associates a TMS-node with each of these 
structures. These nodes are used for recording several types of information about belief in 
the corresponding program structure. The most important piece of information is the set of 
justifications for a node. These justifications describe the reasons for believing the 
knowledge represented by the program structure associated with the node. Each time the 
reasoning program determines a new belief or assertion, it informs the TMS of a 
justification for the node corresponding to the new belief. This justification is in terms of 
the nodes of the other program structures used in the derivation. The TMS then adds this 
new justification to the set of justifications attached to the TMS-node of the new belief. 

Each time a new justification is provided, the TMS checks to see if any changes 
in beliefs are indicated by the new justification. If so, the process of truth maintenance is 
invoked. This involves examining the recorded justifications to redetermine well-founded 
support for the nodes whose justifications depended on the changed beliefs. The program 
is then notified of the changes made by the TMS. To allow this, the program can associate 
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several functions with each of the TMS-nodes associated with its own structures. To signal 
the occurrence of changes in beliefs, the TMS simply invokes the function associated with 
the changed TMS-node and the nature of the change that has occurred. The program 
structure associated with the changed node is used as the argument passed to the function. 
In this way, the program can arrange that changes in its beliefs can initiate any desired 
changes to its structures. 

The program can also tell the TMS that a certain node represents a contradiction. 
The TMS remembers this, and attempts to ensure that the node is never believed. It does 
this by invoking the dependency-directed backtracking system whenever well-founded 
support is derived for the contradiction node. The backtracker will then try to invalidate 
the support of the contradiction by removing one of the assumptions underlying the 
contradiction. Contradictions which cannot be removed by this process are tolerated. 

The TMS provides many useful functions for interrogating the structure of the 
current set of program beliefs. Whenever well-founded support for a TMS-node is 
determined, the TMS also records a set of antecedent nodes and a set of consequent nodes. 
These sets are derived from the justifications used in determining the well-founded support. 
The set of antecedents is the set of nodes on which the belief depends. The set of 
consequences is the set of nodes whose justifications depend on the belief. The TMS may 
then be queried for the antecedents or consequences of a particular belief, or for other 
information derived from these relationships between beliefs. For instance, the set of 
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C. An Example 



On the ground, 

Sleep sound. 

I'll apply 

To your eye, 

Gentle lover, remedy. 

When thou wakest, 

Thou takest 

True delight 

In the sight 

Of thy former lady's eye. 

And the country proverb known, 

That every man should take his own, 

In your waking shall be shown. 

Jack shall have Jill, 

Nought shall go ill, 
The man shall have his mare again and all shall be well. 

William Shakespeare, A Midsummer Night* s Dream 



This section presents a simple example involving the making of assumptions, 
truth maintenance, and dependency-directed backtracking. For this example we set modesty 
aside and attempt to imitate William Shakespeare in designing the plot of A Midsummer 
Night's Dream, The play is to be a comedy. The major problem in this undertaking is to 
depict the foolishness of mortals while preventing the story from turning into a tragedy. 
This is done with a truth maintenance system. The structure of the plot, in terms of the 
player's attitudes, is determined by truth maintenance. When events threaten tragedy, 
dependency-directed backtracking is invoked to change their attitudes. These steps 
eventually determine a consistent (happy) set of attitudes for the players. Disappointingly, 
this report can only describe the mechanisms behind truth maintenance and dependency- 
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directed backtracking. We must surrender the explanation of the magic of Puck to future 
research. 

The problem involves the four individuals Demitrius, Helena, Hermia, and 

Lysander. Initially, Hermia loves Lysander, Helena loves Demitrius, and to make the story 

interesting, both Demitrius and Lysander love Hermia. We first specify the loves of the 

women to our reasoning program. 

(Assert (loves Hermia Lysander) (Premise)) 
F-l (LOVES HERMIA LYSANDER) (PREMISE) 

(Assert (loves Helena Demitrius) (Premise)) 
F-2 (LOVES HELENA DEMITRIUS) (PREMISE) 

The information and rules of our example will be framed in the AMORD AM0 problem 

solving system. Assertions, as above, are of the form (ASSERT ossertion pattern> 

< just i f icat ion>) and should be read as "belief in ossertion pattern> is justified by 

<justi f ication>." The justifications refer to functions which will accept the information 

transmitted in the justifications and implement the necessary TMS justifications between 

facts. Facts are referenced in justifications by means of a unique name of the form T-nn" 

for each fact. 

The next specification is that of the amatory preferences of the men. In contrast 
to the solid beliefs of the women, the men are easily swayed by flowers and dependency- 
directed backtracking. 
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(Assume (loves Demitrius Hermia) (Premise)) 

F-3 (ASSUMED (LOVES DEMITRIUS HERMIA)) (PREMISE) 

F-4 (NOT (LOVES DEMITRIUS HERMIA)) ; No justification specified 

F-5 (LOVES DEMITRIUS HERMIA) (ASSUMPTION F-3 F-4) 

Assumptions are the fundamental use of non-monotonic justifications in the dependency 

system. The assumption of F-5 above is accomplished by asserting the reason (F-3) for the 

assumption and establishing belief in F-5 based on this reason and on the lack of belief in 

F-4. This mechanism will be explained in more detail in the next chapter. Its effect is to 

ensure that F-5 will be believed as long as there are no reasons for believing otherwise. At 

this point, F-4 is not believed, for no reasons exist supporting its belief. F-5 is believed, 

since F-3 is believed and F-4 is not. 

(Assume (loves Lysander Hermia) (Premise)) 

F-G (ASSUMED (LOVES LYSANDER HERMIA)) (PREMISE) 

F-7 (NOT (LOVES LYSANDER HERMIA)) 

F-8 (LOVES LYSANDER HERMIA) (ASSUMPTION F-B F-7) 

(Rule (:n (not (loves Demitrius Hermia))) 

(Assert ( loves Demi tri us Helena) (Qual i ty-not-quant i ty :n))) 

This rule specifies Demitrius' love if he falls from love with Hermia by providing the 

alternative of Helena. The first component of the rule is a pattern, which specifies both a 

variable (marked by the colon prefix) to be bound to the fact name of the matching 

assertion, and the pattern against which assertions are to be matched. The body of the rule 

follows the pattern. If a matching assertion is present, the rule will bind the variables of the 

pattern to the values derived from the match and evaluate each expression of the body. If 

it becomes known that Demitrius does not love Hermia, the above rule will justify the belief 

that Demitrius loves Helena. Lysander's second choice is described similarly. 
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(Rule (:n (not (loves Lysander Hermia))) 

(Assert (loves Lysander Helena) (Love-in-idleness :n))) 

Next, we add some real-world knowledge about the troubles of men. 

(Assert (jealous Lysander) (Premise)) 
F-9 (JEALOUS LYSANDER) (PREMISE) 

(Rule (: j (jealous :x) ) 

(Rule (: II ( loves :x :y) ) 

(Rule (; 12 (loves :z :y)) 

(i f (not (equal :x :z) ) 

(Assert (kills :x :z) (Jealousy :j :ll :I2)))))) 

This rule embodies the knowledge that jealous people tend to react unpleasantly against 

others who also love the object of their jealousy. The conditional of the rule body ensures 

that jealousy is not self-applicable. 

(Rule (:. II (loves :x :y)) 

(Rule (: 12 (loves :y :z)) 

(if (not (equal :x :z)) 

(Assert (kills ;x :x) (Unrequi ted- love :ll :I2))))) 

This rule expresses the depression and consequent action resulting from unrequited love. 



The final rule provides the means by which the happy nature of this comedy is 

ensured. This is done by declaring all murders to be tragedies. The occurrence of a 

tragedy is declared to be a contradiction. (Actually, tragedies can be interpreted as 

signalling the contradiction of a particular murder with the general principle (not (kills 

: x : y) )-.) This contradiction will lead to changing the set of assumptions about the loves 

of the characters which lead to the tragedy. 

(Rule (:k (ki I Is :x :y)) 

(Assert (tragedy :k) (Contradiction :k))) 
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With these assertions and rules we begin the analysis of the conflicts between the 
desires of the four lovers. AMORD does not specify the order in which rules are to be 
applied to matching assertions. We will choose an order of application which provides for 
maximal entertainment. 

The first derived assertion notes the conflict caused by Lysander's jealousy. 
F-18 (KILLS LYSANDER DEniTRIUS) (JEALOUSY F-9 F-8 F-5) 
This is noticed to be a tragedy, and so ruled out as a happy state of affairs. 
F-ll (TRAGEDY F-18) (CONTRADICTION F-19) 

The derivation of belief in a contradiction indicates the inconsistency of the set of 
beliefs used in deriving the contradiction. To restore the (apparent) consistency of the set of 
beliefs, the TMS notifies the dependency-directed backtracker of the contradiction. The 
backtracking process consists of tracing backwards through the antecedents of the 
contradiction to find the set of assumptions underlying the contradiction. One of these 
assumptions must be removed to remove the contradiction. The proper justification for the 
removal must be specified. The reason for retracting an assumption is that the assumption, 
when combined with the other assumptions, provides support for the contradiction. This 
reason is valid only under certain circumstances — those in which the combination of the set 
of assumptions provides support for the contradiction. This is the statement of a 
conditional proof. That i^ t the justification for not believing a particular assumption is that 
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the other assumptions are believed, and that if all the assumptions are believed, the 
contradiction follows. Dependency-directed backtracking improves on traditional 
backtracking mechanisms in two ways; irrelevant assumptions are ignored, since the set of 
inconsistent beliefs is determined by tracing dependencies; and the cause of the 
contradiction is summarized in terms of this set of inconsistent assumptions as a conditional 
proof which remains valid after the contradiction itself has been removed. 

In the case at hand, this process begins by examining the reasons for the 
contradiction in order to locate the inconsistent set of assumptions underlying the 
contradiction. The contradiction F-ll depends upon F-18, which in turn depends upon F- 
9, F-8, and F-5. F-8 and F-5 are recognized as assumptions by the system, since the reasons 
for their beliefs include the lack of belief in F-7 and F-4 respectively. Beliefs supported by 
a lack of knowledge in other assertions are suspect. This is because an inconsistency based 
on the lack of a reason for believing some fact can be interpreted as providing a reason for 
believing that fact. For instance, a robot may decide that it is safe to cross the street 
because of its failure in attempting to prove that it is unsafe to cross the street. If the robot 
then gets run over, that contradicts its belief in the safety of its actions. The natural 
conclusion is that it was unsafe to cross the street. 

The backtracking system will try to reconcile the conflicting assumptions by 
making sure they are not all believed at once. This is accomplished by choosing one of the 
suspect assumptions at random and disbelieving it. The disbelief is brought about by 
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justifying belief in one of the supporting facts whose former lack of valid justifications 
allowed belief in the selected assumption. This new justification is made on the basis of the 
beliefs in the other assumptions underlying the contradiction and that part of the support 
for the contradiction which does not depend on these assumptions. 

Note at this point one of the efficiencies of dependency-directed backtracking 
relative to the traditional chronological backtracking schemes. In the above, the set of 
inconsistent assumptions underlying the contradiction is a subset of all extant assumptions, 
for I neglected to mention my assumptions about the loves of Theseus, Hippolyta, Oberon, 
Titania, Bottom, Pyramus and Thisby. These other assumptions may have been 
determined after the current choices for Lysander and Demitrius. Chronological 
backtracking systems for choosing alternatives might search through sets of choices 
involving these independent assumptions. The dependency-directed system will only 
consider those assumption actually affecting the discovered contradiction. 

The next step in the backtracking procedure is the creation of a 
NOGOOD, N0G00D an assertion summarizing the support for the contradiction which is 
independent of the inconsistent set of assumptions. 

F-12 (NOGOOD F-ll) (CP F-ll (F-8F-5)) 
This statement of independent support is made by means of a conditional proof 
justification, stating that F-12 should be believed if when F-8 and F-5 are believed, so is 
F-ll. In the present situation, this reduces to the question of belief in F-9. This is because 
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F-9 can be combined with the assumptions F-8 and F-5 to support belief in Demitrius' 
murder. In effect, belief in F-12 is supported solely by belief in Lysander's jealousy. 

We must not believe all the assumptions in the set of inconsistent assumptions at 

the same time. To ensure this, the NOGOOD is used to justify belief in some of the 

assertions underlying these assumptions. The assertions to justify are those whose lack of 

belief was used in the support of the assumptions. The minimum that is necessary to 

accomplish this is to provide a valid justification for belief in one of the unbelieved 

assertions supporting one of the assumptions. Logically, any one of the assumptions in the 

inconsistent set can be removed. However, unimpeachable reasons may later be found for 

believing some of the assumptions. It is necessary to make sure that each assumption will 

be retracted in turn if the remaining assumptions cannot be doubted. By describing each of 

the possible ruling-out of beliefs through these new justifications, knowledge of the 

inconsistency is preserved even if an assumption is retracted and later rejustified. 

F-7 (NOT (LOVES LYSANDER HERMIA)) (NOGOOD F-12 F-5) 

TRUTH MAINTENANCE PROCESSING DUE TO F-7. 

F-4 (NOT (LOVES DEMITRIUS HERNIA)) (NOGOOD F-12 F-8) 

Note that truth maintenance occurred after the new support for belief in F-7, since belief in 

F-8 depended on a lack of belief in F-7. The invocation of truth maintenance affected only 

those beliefs determined from the changed belief - F-7, F-8, F-10, and F-ll. All other facts 

are known, by means of the recorded dependencies, to be independent of these changes. 

Following truth maintenance, F-7 is believed, and F-8, F-10, and F-ll are not. Since F-8 

is not believed, the following justification of F-4 via F-12 and F-8 fails to support belief in 
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F-4. 



With the backtracking concluded, we can continue the analysis of the 

consequences of the rules. The next focus for attention is Lysander's change of lover. His 

love for Hermia was retracted by the backtracker, so he now turns to Helena. 

Unfortunately, this means that Hermia has now lost her love and kills herself in a fit of 

despondence. 

F-13 (LOVES LYSANDER HELENA) (LOVE-IN-IDLENESS F-7) 
F-14 (KILLS HERMIA HERMIA) (UNREQUITED-LOVE F-l F-13) 
F-15 (TRAGEDY F-14) (CONTRADICTION F-14) 

Another bout of backtracking is invoked. This time, tracing backwards through 

the antecedents of the contradiction leads to F-14, F-13, F-l, F-7, F-12, and F-5. Of these, 

only F-5 is an assumption. The NOGOOD mechanism then forces the retraction of the 

assumption that Demitrius loves Hermia. 

F-1G (NOGOOD F-15) (CP F-15 (F-5)) 

F-4 (NOT (LOVES DEMITRIUS HERMIA)) (NOGOOD F-1G) 

TRUTH MAINTENANCE PROCESSING INVOKED BY F-4. 

In this situation the support of the NOGOOD consists of the beliefs F-l and F-12. This 

invocation of truth maintenance involves checking the beliefs in F-4, F-5, F-7, F-8, F-13, 

F-14, and F-15. The supporting of belief in F-4 now removes support for F-5, which was 

the reason for the retraction of Lysander's love for Hermia. Truth maintenance determines 

that F-4 and F-8, are believed, and that F-5, F-7, F-13, F-14, and F-15 are not. This 

means that Lysander is now back with Hermia. 
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II. Truth. Maintenance Systems Applied 



A. Introduction 

A truth maintenance system provides a representation for describing properties of 
beliefs and relationships between beliefs. These properties and relationships are interpreted 
by the TMS as constraints on the current set of beliefs. The duty of the TMS is to record 
these constraints and to maintain the current set of beliefs in accordance with these 
constraints. The following chapter describes mechanisms for efficiently achieving this 
concordance. This chapter describes the basic types of information accepted by the TMS, 
and their use in describing more complex relationships of importance in problem solving 
programs. 

The TMS accepts two forms of information; justifications for beliefs, and 
declarations of contradictions. Justifications specify conditions under which a belief is to be 
held. These conditions involve questions about whether certain other beliefs are held. 
Contradictions specify conditions under which a belief is not to be held. Beliefs which are 
declared to be contradictions indicate that an inconsistent set of hypotheses is in force. The 
inconsistency is resolved by invoking the process of dependency-directed backtracking. 

The second section of this chapter describes the representation of reasons for 
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holding beliefs. This representation can be used to describe non-monotonic deductions and 
conditional proofs. The third section uses this representation to model several important 
relationships between beliefs in problem solving systems. These include default 
assumptions, sets of alternatives, and equivalence class representatives. The final section 
describes how beliefs may be automatically organized into hierarchical levels of detail. 
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B. Representing Knowledge About Beliefs 

Everything's got a moral, if you can only find it. 
Lewis Carroll, Alice in Wonderland 

A truth maintenance system has two basic components; beliefs, and justifications 
for beliefs. A node is used to represent a component of program knowledge which may be 
invested with belief. For instance, each assertion in a PLANNER-like data base might 
have an attached node to represent the assertion in the TMS. A justification is used to 
represent a reason for believing the knowledge represented by a node. Justifications for 
belief in a node are predicates of other nodes. These predicates have an internal structure 
which is accessible to the truth maintenance system. This allows the TMS to extract several 
types of dependency relationships between nodes by examining justifications. The two most 
important types of dependencies are those of the antecedence and consequence relationships 
between nodes. 

A node may have several justifications for belief. The node is believed if at least 
one of these justifications is valid. A justification is valid if it evaluates true. We say that a 
node which is believed is in, and that a node without a valid justification is out. The 
distinction between in and out is not that of true and false. The former denote conditions 
of knowledge about reasons for belief; the latter, belief in a piece of knowledge or its 
negation. Loglc8 of Bd * f We say that a node which is in has a support-status of IN, and that a 
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node which is out has a support-status of OUT. IN and OUT will also be used as 
predicates of sets of nodes in justifications. 

The basic types of justifications for belief are premise justifications, deductive 
justifications, conditional proof justifications, and assumption justifications. Nodes believed 
due to premise, deductive, conditional proof, or assumption justifications are called, 
respectively, premises, deductions, implications, and assumptions. 

Premise justifications correspond to the constantly true predicate. Premises are 
therefore always in, independent of any other beliefs. Premises are useful in expressing the 
basic knowledge of a program, and in hypothetical reasoning. 

Deductive justifications express that one belief follows from belief in each node of 
a set of nodes. Deductive justifications are the most common form of justification in normal 
computations. 

Conditional Proofs are justifications for supporting belief in a node on the basis 
of the derivability of one node from other nodes. A conditional proof justification has two 
parts; a single node, called the consequent of the conditional proof, and a set of nodes, 
called the hypotheses of the conditional proof. The support implied by the conditional 
proof justification is the subset of the support of the consequent which does not derive from 
the hypotheses. Nodes justified by conditional proofs have the meaning of an implication. 
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The most important applications of conditional proof justifications are in summarizations. 
In dependency-directed backtracking, for example, conditional proofs are used to note the 
reasons for the inconsistency of a set of assumptions. Even after some of the assumptions 
are retracted, the conditional proof remains valid. This prevents the same mistake 
occurring in the future. 

Assumption justifications support beliefs on the basis of a lack of knowledge. 
They are justifications which are valid only if specified nodes are out. Assumptions 
represent non-monotonic knowledge. Unlike other types of justifications, assumption 
justifications can be invalidated by the addition of new justifications for beliefs. The 
typical use of an assumption justification is in deriving one belief through an inability to 
prove it false. For instance, one may assume a node F true unless proven otherwise by 
justifying F with the predicate (OUT ~F). If ~F is a node representing the negation of F, 
this justification will support belief in F as long as there are no valid reasons for believing 
~/r™NOT 

These types of justification can be captured in two forms of predicates. The first 
of these, the support-list justification, is represented by a predicate of the form 

(AND (IN <inlist>) (OUT <outlist>)). 
A support-list justification is valid if each node in its fnlist is in, and each node in its outUst 
is out. Premise justifications are support-list justifications in which both the £nlist and 
ouflist are empty. Deductive justifications are those in which the ouflist is empty. 
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Assumption justifications have a non-empty ourlist. 

Conditional proof justifications cannot be represented by a support-list 
justification. Conditional proof justifications will be represented by a predicate of the form 

(CP <consequent> <inhypotheses> <outhypotheses>). 
A justification of this form is valid if the consequent node is in whenever each node of the 
inhypotheses is in and each node of the oufhypotheses is out. Standard conditional proofs 
in natural deduction systems specify a single set of hypotheses. Our conditional proofs 
require that the set of hypotheses be divided into two disjoint subsets, since nodes may be 
derived both from some nodes being in and other nodes being out. Some natural deduction 
systems also allow a set of consequents in a conditional proof. We restrict our conditional 
proofs to a single consequent for the purpose of efficiency. Note that if multiple consequents 
were allowed, in the form of a set of in consequents and a set of out consequents, support-list 
justifications would be representable as conditional proofs with empty sets of hypotheses. 
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C. Problem Solving Structures 



Or, if there were a sympathy in choice, 

War, death, or sickness did lay siege to it, 

Making it momentany as a sound, 

Swift as a shadow, short as any dream, 

Brief as the lightning in the collied night, 

That, in a spleen, unfolds both heaven and earth, 

And, ere a man hath power to say, "Behold!" 

The jaws of darkness do devour it up: 

So quick bright things come to confusion. 

William Shakespeare, A Midsummer Night's Dream 



These basic types of justifications can be employed to represent more complex 
relationships between beliefs. This section is devoted to describing some of these. The 
relationships presented below describe choice structures. In these, the justifications are 
arranged to select one alternative from a set of alternatives. In most cases, this choice is 
backtrackable. That is, if a contradiction is derived which depends on the choice, the 
backtracking mechanism can cause a new alternative to be chosen from the set of 
alternatives. In the equivalence class representative selector, the choice is not backtrackable. 
In some of the backtrackable choice structures, new alternatives will be chosen in a specified 
order as previous alternatives are ruled out. In others, random choices are made from the 
set of yet acceptable alternatives. An additional complexity involves the extensibility of the 
structures. Some of the structures can be augmented at any time by new members of the set 
of alternatives. Other structures are fixed at creation, and cannot be augmented. 
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C.l Default Assumptions 

One very common technique used in problem solving systems is to specify a 
default choice for the value of some quantity. This choice is made with the intent of 
overriding it if either a good reason is found for using some other value, or if making the 
default choice lea,ds to an inconsistency. In the case of a binary choice, such a default 
assumption can be represented by believing a node if the node representing its negation is 
out. The more general case can be represented by the following generalization of the binary 
case. Let {Fj, ... , F n } be the set of the nodes which represent each of the possible values of 
the choice. Let G be the node which represents the reason for making the default 
assumption. NEE0CH0,CE Then F t may be made the default choice by providing it with the 
justification 

(AND (IN G) (OUT Fj ... F H F M ... F n )). 
If no information about the choice exists, there will be no reasons for believing any of the 
alternatives except F v Thus F t will be in and each of the other alternatives will be out. If 
some other alternative receives a valid justification from other sources, that alternative will 
becpme in. This will invalidate the support of F i% and F i will become out. If a 
contradiction is derived from F i% the dependency-directed backtracking mechanism will 
recognize that F i is an assumption by means of its dependence on the other alternatives 
being out. The backtracker may then justify one of the other alternatives at random, as 
described in the following chapter, causing F t to go out. In effect, backtracking will cause 
the removal of the default choice from the set of alternatives, and will set up a new default 
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assumption structure from the remaining alternatives. 

The above structure is not extensible. No new alternatives can be added to the 
set once the default assumption justification has been made. Such extensibility is necessary 
when specifying a number as a default due to the large number of possible alternatives. 
For cases like this the following structure may be used instead. Retaining the above 
notation, let ~F t be a new node which will represent the negation of F v We will arrange 
for F. to be believed if ~F t cannot be proven, and will set up justifications so that if Fj is 
distinct from F v F, will imply ~F f This is done by giving F t the justification 

(AND (IN G) (OUT ~F f )), 
and by giving ~F t a justification of the form 

(AND (IN Fj) (OUT)) 
for each alternative F* distinct from F v As before, F t will be assumed if no reasons for 
using any other alternative exist Furthermore, new alternatives can be added to the set 
simply by giving ~F t a new justification corresponding to the new alternative. This 
structure for default assumptions will behave as did the fixed structure in the case of an 
unselected alternative receiving independent support. Backtracking, however, has a 
different effect. If a contradiction is derived from the default assumption supported by this 
structure, ~F t will be justified so as to make F t become out. If this happens, no alternative 
will be selected to take the place of the default assumption. The extensible structure 
requires an external mechanism to construct a new default assumption whenever the default 
is ruled out. 
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C.2 Unordered Sets of Alternatives 

Another common problem solving structure is the unordered set of alternatives. 
Such unordered sets occur in Micro-PLANNER as the set of methods retrieved for solving 
a goal when no recommendation lists are specified. This structure can be represented as a 
number of overlayed default assumptions as described in the previous section. By setting 
up justifications as follows, one of the assumptions will be chosen at random. As before, let 
{F Jf , F n ] be the set of nodes representing the alternative choices, and let C be the node 
representing the reason for making the choice. One node of the set of alternatives will be 
randomly chosen to be in if each F t is provided with the antecedent 

(AND (IN G) (OUT Fj ... F H F^j ... F n )) 9 
that is, 

(AND (IN <reason for alternative set>) (OUT <other alternatives>)) 
With this structure, the alternative which is selected will be believed unless either a 
contradiction causes another alternative to be believed, or if one of the other alternatives 
receives an independent justification for belief. The derivation of a contradiction from the 
selected alternative will cause another alternative to be selected at random. This in turn 
will cause the retraction of the previous choice. 

This structure does not prevent more than one of the F t from being in via an 
independent means of support. To impose this exclusiveness, it is necessary to state that 
each pair of alternatives is inconsistent. This can be done by supporting a contradiction 
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with a justification (IN F i F ,) whenever each of the pair of alternatives F i and F f 
becomes in. 

This structure does not allow the addition of new alternatives to the set of 
alternatives. To effect such extensibility, the following structure is necessary. For each 
possible alternative F v two new nodes, PA t (meaning m F t is a possible alternative") and 
NSA t (meaning n F t is not the selected alternative") should be created. Each PA t should be 
justified with the reason for having F ( in the set of alternatives. Each F t and NSA ( should 
be justified as follows: . 

F £ : (AND (IN PA.) (OUT NSA-)) 

{or: (AND <is alternative <is selected alternative^} 
NSA-: (IN Fj) {for each j distinct from i} 

{or: <no other alternative selected>} 

New alternatives can be added to the set by collecting all existing alternatives and creating 
the above justifications for the the new alternative node and for all of the not-selected- 
alternative nodes. 
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C.3 Linearly Ordered Sets of Alternatives 

Linearly ordered sets of alternatives are useful whenever heuristic information is 
available for making a choice One way such situations arise is by using recommendation 
lists in Micro-PLANNER. Another use is in heuristicaHy choosing the value of some 
quantity, such as the state of a transistor or the day of the week for a meeting. These types 
of sets of alternatives can be described by the following justifications. The justifications are 
arranged so that backtracking will cause sequencing through the set of alternatives in the 
specified order. For each alternative A^ three new nodes should be created. These new 
nodes are PA t (meaning n A t is a possible alternative"), NSA t (meaning n A t is not the 
selected alternative"), and ROA i (meaning n A i is a ruled-out alternative"). Each PA t should 
be justified with the reason for including A i in the set of alternatives. Each ROA t is left 
unjustified. Each A t and NSA t should be given justifications as follows: 

A t : (AND (IN PA^SAj ... NSA H ) (OUT ROA^) 

{or: (AND <is alternative> <no better is selected> <is not ruled out>)} 

NSA t : (OUT PA t ) , (IN ROA t ) 

{or: (OR <is not a valid alternative <is ruled out>)} 

With this structure, processes can independently rule in or rule out an alternative by 
justifying the appropriate alternative node or ruled-out-alternative node. 



This structure is also extensible. New 
constructing the appropriate justifications as above, 
appearing at the end of ft* eider. Tint is, 
linear order between two orevioiiitf imfta! i 
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C.4 Equivalence Class Representatives 

In many cases, a value may be computed independently by several different 
methods. Sometimes different values will be computed for the same quantity. It is desirable 
to check the consistency of each of these values with all other values for the same quantity. 
This is a way in which different parts of program knowledge can constrain each other, 
either by combining two representations of the same value to compute a new quantity, or by 
declaring the two representations to be contradictory. Pr0pagatkm Each new representation of 
the value in question should be compared with the previously discovered representations to 
check for coincidences and contradictions. The new representation should then be added to 
the list of alternate representations for checking further representations. Since any value in 
the set of consistent representations is equivalent to all the others, queries made for the 
value of the quantity should be answered with a single representative. Successive queries 
should be answered with the same representative. In addition, since all the possible values 
are equivalent and consistent, backtracking should not attempt to choose a new representive 
if the selected representative is used in deriving a contradiction. 

The following structure describes a mechanism whereby a single representative 
can be chosen from a set of equivalent objects. The justifications are arranged so that one 
member of the set will be distinguished as the representative member. This representative 
will not depend upon the choice from the set. This is done as follows. For each member, 
M. f create two new nodes PR t (meaning n M ( is a possible representative") and SR £ 
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(meaning "M t is the selected representative"). Each PR i should be justified with the reason 
for believing M t to be a consistent member of the equivalence class. Each M t and SR t 
should be justified as follows: 

SR t : (AND (IN P/?.) (OUT SRj ... SR H ) ) 

{or: (AND <is a member> <no previous is selected>)} 
M t : (CP of SR t relative to (OUT SRj ... SR H ) ) 

{or: (CP of <selected alternativo relative to <those not selected>)} 

The alternative mechanism selects one of the members PR t as the representative SR V The 
choice is hidden from the backtracking system by the conditional proof justifications for the 
representatives. These conditional proofs remove all dependence of the representative on 
the choice mechanism, so that M ( depends only on PR.. Because of this, the backtracking 
system will not attempt to select another member of the set if the selected representative is 
involved in an inconsistency. The representative will be changed only if an assumption is 
retracted which supports the membership of the representative in the set. This structure is 
extensible. New members of the equivalence class can be added to the end of the list of 
members. 



38 



E. Generalization and Levels of Detail 



The lunatic, the lover, and the poet, 
Are of imagination all compact. 

William Shakespeare, A Midsummer Night's Dream 



Hypothetical reasoning is useful in modifying arguments for beliefs. Conditional 
proofs allow the relativization of beliefs with respect to a set of beliefs. If the original belief 
is justified by the support of this conditional proof, the argument for the belief has been 
generalized. Alternatively, the belief may be justified by the conjunction of the support for 
the conditional proof and a set of beliefs which is semantically equivalent to the set of 
hypotheses of the conditional proof. If the new set of beliefs is smaller than the set of 
replaced hypotheses, the argument has been summarized. 

One technique for solving a problem is to generalize from the solution of a 
particular instance of a problem to a solution of the problem itself. This technique is useful 
when a result valid for each member of a set is desired, but computations can be performed 
only on specific members of the set. Conditional proofs may be used in such cases to 
generalize the justification of the specific result by removing its dependence on the specific 
member used. For example, an electronic circuit analysis program might require a specific 
(numerical) input voltage to calculate the gain of a circuit. This would produce a specific 
gain which depends on the particular input voltage used. Actually, the computed gain is 
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valid over the entire linear region of the device. The gain for all input voltages can be 
computed by using a typical numeric val? * of the input voltage to compute an instance of 
the gain, and then generalizing the argument for this instance. This is done by justifying 
the general gain value as the conditional proof of the specific gain value relative to the 
particular value of the input voltage used. (This neglects the problems introduced by the 
dependence of the computation on inequalities.) 

This technique of generalization is a special case of a powerful method for 
separating levels of detail. This method uses conditional proofs to support results in terms 
of the names of the methods used to compute them. In this way, the lower level of detail is 
summarized and replace by the name of the method which produced it. This technique is 
critically important in hierarchical systems employing truth maintenance. Without such 
summarizations, explanations of results involve huge numbers of intermediate results from 
the lower levels of detail used in computing the final result. This not only produces 
incredibly long and incomprehensible arguments, but also degrades the effectiveness of 
backtracking and other processes which must trace through arguments for beliefs. 

One way to introduce hierarchical structure into computations is to separate 
knowledge into levels of detail. These levels can be reflected in the dependency structure by 
a mechanisms analogous to function calling in programming languages. When one level of 
knowledge needs to use a lower level to compute something, the higher level "calls" a lower 
level routine. The components of higher level knowledge to be used in the computation are 
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the "arguments" of the function call. These are mapped into corresponding components of 
lower level knowledge. These corresponding components represent the "parameters" of the 
lower level routine. The low level routine, the "function", then performs the desired 
computation using the parameters, and passes the resulting values back up to the higher 
level of knowledge. 

This analogy is implemented as follows. Routines are attached to named 
boundaries of knowledge. A boundary consists of two sides and a set of paired terminals. 
Each terminal on one side of the boundary has a corresponding terminal on the other side. 
One side of a boundary represents the external view of the routine, that is, the "call" on the 
routine. The other side of the boundary represents the internal view of the routine, that is, 
the "parameter declarations" of the routine. When knowledge appears at one side of a 
terminal of a boundary, it is transmitted to the corresponding terminal on the other side of 
the boundary. A value is transmitted from an outside terminal by justifying the same value 
for the corresponding inside terminal. The justification used is in terms of the value's 
appearance on the outside terminal in conjunction with a node representing the name of the 
boundary. A value is transmitted from an inside terminal to the corresponding outside 
terminal by justifying the outside value as the conjunction of the node representing the 
boundary name and the conditional proof of the inside value with respect to the boundary 
name. By using the conditional proof, all dependence of the value on knowledge inside the 
boundary is removed. This knowledge is replaced bv adding the boundary name back into 
the justification after the conditional proof has been performed. ,nttff8c#$ 
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The following example demonstrates the use of this technique in a hypothetical 
hierarchical electronic circuit analysis program. This example is loosely based on an actual 
program (that ran at least once) written by G. J. Sussman, M. Matz, and myself. 

The basis of the example will be the conservation of current by a resistor. 

Resistors are modelled by overlaying two constraints on the basic resistor device. s,,ce8 These 

are the constraints of 2-terminalness (conservation of current) and ohms-lawness. 

(Rule (:t (type :r resistor)) 

(Assert (type :r 2-terminal) (Overlay :t)) 
(Assert (type :r ohms-law) (Overlay :t))) 

In this example we will ignore the ohms-law aspect of the resistor. The implementation of 

the 2-terminal constraint is in terms of a lower level of detail. This lower level implements 

equations as adders and multipliers connected together. The arithmetic level of devices is 

used to compute and propagate numerical constraints. This computation is uninteresting to 

the higher levels dealing with electrical laws and devices. The mechanism of conditional 

proof will be used to isolate the higher level of detail from the lower. 

(Rule (:t (type :d 2-terminal) ) 

(Assert (implementation :d (arithmetic-boxes 2-terminalness)) 

(Method :t)) 
(Rule (:impl (implementation :d (arithmetic-boxes 2-terminalness))) 
(Assert (type (kcl :d) adder) (part :t :impl)) 
(Assert (map (current (#1 :d)) (al (kcl :d)) :impl) 

(Hake-map : t : imp I) ) 
(Assert (map (current (#2 :d)) (a2 (kcl :d)) :impl) 

(Make-map : t : imp I) ) 
(Assert (value (sum (kcl :d)) 0) 

(Implementation :t :impl)))) 

Here the 2-terminal constraint is implemented as an adder. This adder constrains the 
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currents of the terminals of the resistor to sum to zero by first mapping each of the currents 
to an addend of the adder, and then declaring the sum of the adder to be zero. These 
mappings will serve as the boundary separating the electrical level of detail (the currents on 
resistor terminals) from the arithmetical level of detail (the connections of adders). 

The following rule defines the behavior of the boundary mappings. 

(Rule (:m (map :varl :var2 :impl)) 
(Rule (:f (value :varl :val)) 

(Assert (value :var2 :val) (INMAP :f :m))) 
(Rule (:f (value :var2 :val)) 

(Assert (value :varl :val) (OUTMAP :f :impl)))) 

This rule sets up the channels by which pieces of information, in this case value assertions, 

are transmitted across the boundary. The INMAP justification does nothing special; it 

merely transmits the value across, adding the map assertion to the justification in passage. 

The OUTMAP justification is the means by which the higher level is separated from the lower 

level. The OUTMAP justification operates by asserting the value being transmitted at the 

higher level. The justification removes the dependence on the lower level of detail by using 

the conditional proof of the lower level value node relative to the implementation node. 

That is 

(OUTMAP :f :impl) 
translates into 

(CP :f ( : i mp I ) 0). 
Since both the mapping structure and the lower level internal structure depend upon this 
implementation node, they are absent from the resulting explanations. 
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As a particular example, we demonstrate the passage of current through a resistor. 

(Assert (type rl resistor) (Premise)) 
F-l (TYPE Rl RESISTOR) (PREMISE) 
F-2 (TYPE Rl 2-TERMINAL) (OVERLAY F-l) 
F-3 (TYPE Rl OHMS-LAM (OVERLAY F-l) 

This defines a particular resistor, Rl. The next level of detail is then implemented. 

F-4 (IMPLEMENTATION Rl (ARITHMETIC-BOXES 2-TERMINALNESS) ) (METHOD F-2) 

F-5 (TYPE (KCL Rl) ADDER) (PART F-2 F-4) 

F-B (MAP (CURRENT (#1 Rl)) (Al (KCL Rl)) F-4) (MAKE-MAP F-2 F-4) 

F-7 (MAP (CURRENT (#2 Rl)) (A2 (KCL Rl)) F-4) (MAKE-MAP F-2 F-4) 

F-8 (VALUE (SUM (KCL RD) 0) (IMPLEMENTATION F-2 F-4) 



With the wiring of the resistor completed (the wiring of the ohms-law constraint 

has been omitted for brevity), we can specify the current on one side of the resistor and 

examine the resulting explanations. 

(Assert (value (current (#1 rl)) 7) (Premise)) 

F-9 (VALUE (CURRENT (#1 RD) 7) (PREMISE) 

F-10 (VALUE (Al (KCL RD) 7) (INMAP F-9 F-B) 

F-ll (VALUE (A2 (KCL Rl) ) -7) (SUBTRACTION F-5 F-10 F-8) 

F-12 (VALUE (CURRENT (#2 RD) -7) (OUTMAP F-ll F-4) 

The lower level rules implementing the arithmetic constraints of addition and multiplication 
have also been omitted for brevity. 

A query for the explanation of the last node, F-12, produces the following result, 
in which the level of arithmetic detail is absent by means of the OUTMAP conditional proof of 
the computed value, as given in F-ll, relative to the implementation node F-4. The 
conditional proof is used to derive the set of higher level beliefs supporting the computed 
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value. These are the nodes used in the explanation. (The mechanism for deriving sets of 
supporting beliefs from conditional proofs is described in Chapter III.) Since there is only 
one possible implementation of a resistor, the IMPLEMENTATION node does not appear in the 
explanation. In other devices, such as transistors, there may be several possible 
implementations depending on the state of the device. In such cases, the implementation 
choice should be included in the justification for the higher-level result. 
(Explain 'F-12) 

PROOF OF F-12 - (VALUE (CURRENT (#2 RD) -7) (OUTMAP F-ll F-4) 
;;; THE INDEPENDENT SUPPORT OF (OUTMAP F-ll F-4) IS (IN F-9 F-2 F-l). 

F-9 (VALUE (CURRENT (#1 RD) 7) (PREMISE) 
F-2 (TYPE Rl 2-TERMINAL) (OVERLAY F-l) 
F-l (TYPE Rl RESISTOR) (PREMISE) 

This example has indicated the usefulness of conditional proofs in clarifying 
explanations by separating levels of detail. More important benefits are possible in 
improving the information examined by backtracking systems. Just as concise explanations 
are more useful to humans, improved explanation structures relating beliefs can ease the 
task of dependency-directed backtracking. Concise explanations reduce the number of 
nodes involved in the support of a contradiction. This allows the backtracking system to 
operate more efficiently. This also means that better reasons are developed in summarizing 
the reasons for inconsistencies. 
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III- Truth Maintenance Mechanisms 



A. Introduction 

The previous chapter presented the descriptive language for imparting 
information about beliefs to a truth maintenance system. Descriptions in this language 
concern logical, time-independent relationships between beliefs. Particular descriptions can 
be given to the TMS in any order. The purpose of this chapter is to describe mechanisms 
by which the TMS can maintain the consistency of the set of beliefs with the constraints 
imposed by new justifications and declared con trad ictions. Comp,€xHy 

This section of this chapter describes the basic components of the world of the 
TMS; nodes and justifications for belief. The second section presents the problems caused 
by circularities in dependency relationships. Circularities arise through circular proofs, and 
require careful handling in the process of determining the support of a belief. The third 
section discusses the process of truth maintenance. This process is invoked whenever new 
justifications or the retraction of premises cause beliefs to change. These changes mean that 
the support of any beliefs affected by the changes must be rederived. The fourth section 
discusses the handling of conditional proofs. The fifth section combines all these 
mechanisms to describe dependency-directed backtracking. 
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Little elaboration is needed on the concepts of nodes and justifications introduced 
in Section II.B. The internal structure of justifications is accessible by the TMS to allow 
efficient processing. To the TMS, a support-list justification (hereafter referred to as a SL- 
justification) is simply a pair of lists of nodes, the inlist and the outlist. A conditional proof 
justification (a CP-justification) has a single consequent node, and two lists of nodes, the 
rnhypotheses and the ourhypotheses. The set of justifications of a node is called its 
justification-set. From these justifications we derive a dependency relationship between 
nodes. Each node has a list of consequences. These consequences are other nodes which 
have justifications mentioning the antecedent node. Each consequent node has either a SL- 
justification containing the node in question in the inUst or the ouflist, or has a CP- 
justification containing the node as either the consequent of the conditional proof, or as one 
of the hypotheses. 
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B. Well-Founded Support Relations 

Clear your mind of cant. 
Samuel Johnson 

Consider the situation in which the node F represents the assertion 

"(- (+ XY) 4)", 
G represents 

"(- X D", 
and H represents 

"(- Y 3)". 
If both F and G are in, then belief in H can be justified by (ANO (IN F G) (OUT) ). This 
justification will cause H to become in. If G subsequently becomes out due to changing 
hypotheses, and if H becomes in by some other justification, then G can be justified by (AND 
(IN F H) (OUT)). Suppose the justification supporting belief in H then becomes invalid. 
If the decision to believe a node is based on a simple evaluation of each of the justifications 
of the node, then both G and H will be left in. This happens because the two justifications 
form circular proofs for G and H in terms of each other. These justifications are mutually 
satisfactory if F, G and H are in. 
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Belief in nodes on the basis of circular proofs can be avoided by only believing 
nodes for which there exists a non-circular argument from premises and assumptions. This 
is accomplished by distinguishing a supporting-justification in the justification-set of each 
in node. The supporting-justification is a valid justification whose validity was determined 
by examining only nodes with well-founded support. Once a node is believed on the basis 
of a supporting-justification, it continues to be believed until its supporting-justification 
becomes invalid. If the node's supporting-justification becomes invalid, the node and any 
nodes using the node in their well-founded support are examined to see if other 
justifications can provide new means of support. 

It is possible to generalize the supporting-justification of a node to a set of 
justifications, each of which provides well-founded support for belief in the node. This 
scheme is attractive because it allows one form of work to be avoided. A node will be 
believed as long as there is at least one supporting-justification. This makes it unnecessary 
to reconsider the support of the consequences of a node if the invalidation of one of the 
node's supporting-justifications leaves the set of supporting-justifications nonempty. There 
are several problems with this approach. One problem is that the support of node must be 
checked with each change in its set of supporting-justifications, even if there is one 
supporting-justification which is always valid. If only one supporting-justification was 
maintained, this invariant justification could allow the checking process to completely ignore 
the node. Another problem is that a major use of the recorded justifications is in tracing 
backwards through the arguments for belief in a node. If multiple supporting-justifications 
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are used, then processes like dependency-directed backtracking and explanation generation 
can become very complex and costly. To handle the multiple justifications for beliefs, these 
processes would have to trace many branching arguments in parallel. Because of these 
problems, the approach used here is that of maintaining a single supporting-justification for 
each believed node. 

If any of several justifications can provide well-founded support, the best choice 
for the supporting-justification is the justification which will remain valid the longest. The 
problem of determining which justification is the most stable is intractable in general, like 
the problem of selecting pages to swap out of memory. Rather than select a supporting- 
justification completely at random, some (rather dubious) heuristics can be used. One 
simple heuristic, the one used in the programs of Appendix 3, is to choose the 
chronologically oldest of the possible justifications. This heuristic is based on the theory 
that chronologically older justifications are likely to be more -fundamental" in some sense, 
and thus less susceptible to change. Alternatively, a "self-organizing" heuristic such as 
bubbling the more stable justifications to the front of the order may be used to modify the 
order of the justification-set of the node. The current research has not included any 
experimentation to see if benefits accrue from the use of these heuristics, or to see which 
provides the better performance. One might also imagine schemes in which a "certainty 
factor" is associated with each node. In such a scheme, the "certainty" of a justification 
might be computed from the certainty factors of the nodes mentioned by the justification. 
The heuristic then chooses the justification with the largest certainty factor as the 
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supporting-justification. Most such measures of certainty require the use of domain-specific 
knowledge about the meaning of the nodes and justifications involved. In addition, the 
semantics of a measure which is not a formal probability measure is very unclear. The use 
of certainty factors has not been persued here for these reasons. 

For the purpose of tracing through justifications, it is convenient to extract 
another dependency relationship from the supporting-justifications of nodes. The 
antecedents of a node are those nodes which currently support belief in the node. Thus an 
out node has no antecedents, and the antecedents of an in node are just those in the 
(necessarily disjoint) union of the inlist and oufiist of the node's supporting-justification. (As 
will be explained in more detail later, CP-justifications never are the supporting- 
justification of nodes. Instead, a CP-justification is used to generate a new SL-justification 
summarizing the independent support of the conditional proof. This SL-justification is 
then used as the supporting-justification.) 

The antecedence dependency is not the only useful dependency relationship of this 
nature. When beliefs change, it is necessary to check not only the believed nodes which 
depended on the changed beliefs, but also any nodes which might now be believed by 
virtue of the changes. To make this efficient, the set of nodes affecting the current support- 
status of each node is collected into the node's set of supporting-nodes. The supporting- 
nodes are the same as the antecedents for in nodes, since any change in one of the 
antecedents of a node may cause the node to become out. The supporting-nodes of an out 
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node are found by selecting one node from each justification of the node. Each of these 
nodes is selected because its support-status led to the invalidity of the corresponding 
justification. This means that each of the out supporting-nodes of an out node is in the 
inlist of one of the node's justifications, and each in supporting-node is in the outMst of some 
justification. This definition does not specify a unique set of nodes as the supporting-nodes 
of an out node, but any such set suffices. The intent is for the supporting-nodes of a node 
to be a small set of nodes which, if unperturbed, indicates that belief in the supported node 
cannot change. In odd cases this definition allows inclusion into the supporting-nodes of a 
node some nodes that do not influence the support-status of the node. For example, the silly 
justification (AND (IN /) (OUT /) ) might cause /to be included in the supporting-nodes, 
even though the justification is constantly false independent of the support-status of/. Note 
also that circularities can occur in the relationship of one node being a supporting-node of 
another. The algebra example above demonstrates such a case, for if the two nodes 
involved in the circularity are both out, they will have each other as supporting-nodes. 

From the supporting-nodes of a node, we define additional concepts as follows. 
The affected -consequences of a node are those nodes whose current support-status rests on 
the node; precisely, the affected-consequences of a node are those consequences of the node 
such that the node is a supporting-node of each of these consequences. The foundations of 
a node are those nodes involved in the well-founded support for belief in the node; 
precisely, the foundations of a node are the transitive closure of the antecedents of the node 
under the operation of taking antecedents. The ancestors of a node are those nodes 
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involved at some level in determining the current support-status of the node; precisely, the 
ancestors of a node are the transitive closure of the set of supporting-nodes of the node 
under the operation of taking supporting-nodes. The repercussions of a node are those 
other nodes whose support-statuses are affected at some level by the support-status of the 
node; precisely, the repercussions of a node are the transitive closure of the affected- 
consequences of the node under the operation of taking affected-consequences. 
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C. Truth Maintenance 



And we'll talk of them too, 
Who loses, who wins, who's in, who's out, 
And take upon's the mystery of things. 

William Shakespeare, King Lear 



Truth maintenance is a process invoked whenever the support-status of a node 
changes. This process consists of redetermining the support-statuses of the node and its 
repercussions. This involves examining the affected nodes to find well-founded support. 
The presence of several types of circularities in the dependency structure complicates 
matters. These circularities call for a more elaborate mechanism than a simple bottom-up 
support analysis. 

Nodes can change their support-status in two ways. The normal reason for 
change is the addition of a new valid justification to an out node. This causes a change of 
support-status from out to in. The other way that a change can occur is if the justification 
of a premise is retracted. 

Different actions are required depending upon the validity of the new justification 
and the support-status of the justified node. A justification added to an in node requires 
only adding the new justification to the justification-set of the node. In this case, the new 
justification cannot cause a change of support or support-status. A new justification added 
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to the justification-set of an out node requires truth maintenance processing if the new 
justification is valid. A non-valid justification can be added to the justification-set of an out 
node without causing truth maintenance, but this requires that the set supporting-nodes of 
the node be updated to include a node responsible for the invalidity of the new justification. 

Truth maintenance processing is not required if a node has no affected- 
consequences. The support-status of the node can be changed without affecting any other 
beliefs. This special case routinely occurs after newly created nodes are given their first 
justification. Truth maintenance is also not required when retracting a node which does not 
have a premise justification for its supporting-justification. In this case, the retraction can 
remove any premise justifications from the justification-set without affecting the node's well- 
founded support. 

Truth maintenance processing starts by producing a list containing the invoking 
nodes and their repercussions. Each node on this list is marked with a support-status of 
NIL to indicate that it lacks well-founded support. (A NIL support-status exists only during 
the process of truth maintenance. Outside of truth maintenance, all nodes have a support- 
status of either IN or OUT.) This marking is used to determine if a justification supplies 
well-founded support for a node. Next, each of the nodes on this list must be examined. 
This is a recursive procedure taking action only if the node being examined has a support- 
status of NIL. If so, the justification-set of the node is evaluated with respect to well- 
foundedness. This is a careful evaluation procedure described below. Examination of this 
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node terminates if well-founded support cannot be found. If well-founded support is found, 
the support-status of the node is set appropriately, the supporting-nodes are installed, and if 
the node is now in, the supporting-justification is installed. Since the newly determined 
support of this node might now allow determination of support for its consequences, each of 
the consequences of the node is examined in turn. Efficiency 

Justifications can be evaluated in a way which indicates whether they provide 
well-founded support. This is done by evaluating the justifications with respect to the three 
values T, F and NIL. SL-justifications evaluate to T if each node of the inlist is in and 
each node of the ourlist is out; to F if some node of the inlist is out or some node of the 
ouflist is in; and to NIL otherwise. CP-justifications evaluate to T if all fnhypotheses are 
in, all ourhypotheses are out f and the consequent is in; to F if the first two conditions hold 
and the consequent is out; and to NIL otherwise. A node is considered in if any of its 
justifications evaluates to T, out if all its justifications evaluate to F, and otherwise lacks 
well-founded support. 

The above process of examination will determine well-founded support for the 
majority of nodes, but can leave some nodes without well-founded support. These are nodes 
which are involved in circularities in the dependency relation, or whose possible support 
depends on nodes involved in circularities. There are essentially three different kinds of 
circularities which can arise. The first and most common is a circularity in which all nodes 
involved can be considered out consistently with their justifications. Such circularities arise 
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routinely through equivalences and simultaneous constraints. One of these circularities is 
present in the algebra example of the previous section. In that example, an equation 
produces a circularity between the nodes G and H. If neither of G or H is supported by 
justifications not involved in the circularity, both G and H should be considered out. 

The second type of circularity is one in which at least one of the nodes involved 
must be in. An example is that of two nodes F and G, such that F has an justification of 
the form (OUT G), and G has an justification of the form (OUT F). Here either F must be 
in and G out, or G must be in and F out. This type of circularity arises in defining 
unordered sets of alternatives. The other types of ordered alternative structures avoid such 
circularities. 

The third form of circularity which can arise is the unsatisfiable circularity. In 
this type of circularity, no assignment of support-statuses to nodes is consistent with their 
justifications. An example of such a circularity is a node F with the justification (OUT F). 
This justification implies that F is in if and only if F is out. Unsatisfiable circularities are 
bugs, indicating a misorganization of the knowledge of the program using the truth 
maintenance system. Unsatisfiable circularities are violations of the semantics of in and out t 
which can be interpreted as meaning that the lack of reasons for belief in a node is 
equivalent to the existence of reasons for belief in the node. (It has been my experience that 
such circularities are most commonly caused by confusing the concepts of in and out with 
those of true and false. For instance, the above example could be produced by this 
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misinterpretation as an attempt to assume belief in the node F by giving it the justification 
(OUT F).) 

The second step of truth maintenance handles these circularities. This step 
consists of a relaxation process in which the nodes not supported during the search for well- 
founded support are specially examined. Like the regular examination procedure, this 
special examination procedure also ignores nodes possessing a non-NIL support-status. It 
first checks for well-founded support, as in the previous examination process, and if it finds 
such support installs it and then processes the node's consequences as described below. If 
well-founded support is still lacking, the SL-justification set is specially evaluated. This is 
done by considering a support-status of NIL in a referenced node to be equivalent to OUT. 
That is, the SL-justification set is evaluated under the assumption that all unsupported 
nodes are OUT. (The CP-justification set is ignored during this evaluation. This will be 
discussed later.) This evaluation determines the node to be either in or out. 

Once the examination finds the support-status for the node, it must check the 
consequences of the node. If the node was determined to be out, then a simple recursive 
examination of the consequences is sufficient. More care is required if the node was 
brought in. Any affected-consequences of the newly supported node had had their support 
determined on the assumption that the newly supported node was out. The inning of this 
node means that this assumption was mistaken. This requires that the affected- 
consequences of the node must be remarked and reexamined. If the node had no affected- 
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consequences, the examination can continue by recursively examining the consequences of 
the node. 

This relaxation procedure will devolve into an infinite loop if unsatisfiable 
circularities are present. Such circularities, as previously mentioned, are really erroneous 
uses of the truth maintenance system. This possibility of an infinite loop can be avoided at 
some expense by making a well-foundedness check before a node is brought in. This check 
operates by checking the ancestors of the inned node to see if they include the node itself. If 
this condition holds, an unsatisfiable dependency structure has been detected . Analy8is 

The above process is incomplete in its treatment of nodes justified via conditional 
proofs. CP-justifications are never used as supporting-justifications. They are instead used 
to generate new SL-justifications. This is done whenever a node is brought in on the basis 
of a CP-justification. The FINDINDEP procedure described in the next section is used to 
trace backwards from the consequent of the CP-justification to collect the sets of nodes 
which support the consequent but are not themselves supported by the hypotheses of the 
CP-justification. These sets (one of in nodes, the other of out nodes) are then made into a 
new SL-justification. This new justification is made the supporting-antecedent of the node 
and added to the justification-set of the node. 

CP-justifications are not evaluated if they are out of context, that is, if an 
enhypothesis is out, or if an ourhypothesis is in. Rather than perform the hypothesizing of 
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beliefs necessary to evaluate the conditional proof justification, the justification is ignored. 
This is an incompleteness in the current system, and a problem for exploration and solution 
by future research. 

The current partial solution to this problem is to pass over the examined nodes 
after truth maintenance has decided their support-statuses. Each node can have a CP- 
consequent-list associated with it. This list is used to record the set of other nodes which 
use the node as a consequent of a CP-justification. If a node has some nodes on its CP- 
consequent-list and is in, then new SL-justifications are derived (if possible) for the nodes 
possessing the CP-justifications. Those nodes are then justified with any new justifications 
that result. If this step causes truth maintenance, the scan must be restarted to check for 
further changed nodes. 

A related check performed during this scan is that of looking for in nodes marked 
as contradictions. If such nodes are found, the backtracking mechanisms is invoked and the 
scan restarted. 

Once well-founded support has been derived for all the nodes affected by truth 
maintenance, the external system can be notified of any changes in beliefs that have 
occurred. This is easily done by allowing the external system to associate two functions with 
each node. One of these, the signat-recalline function, is called with the external 
representation of the node as its argument if the node's support-status has changed from out 
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D. Conditional Proofs 

Some mistakes we must carry with us. 
Larry Niven, Ringworld 

The Deduction Theorem of mathematical logic states that if C is derivable from A 
and B, then (IMPLIES B C) is derivable from A alone. This theorem forms the basis for 
the conditional proof mechanism used in a truth maintenance system. This mechanism, 
called FINDINDEP, F,ND,NDEP is a procedure which uses a proof of the belief C to find a 
justification for (IMPLIES B C) in terms of A. Conditional proof justifications have a set of 
enhypotheses and a set of oufhypotheses. If each node in the inhypotheses is in, and each 
node in the oufhypotheses is out, then FINDINDEP can be applied to compute the set of 
support of the implication of any in node C by these hypotheses. That is, it computes the 
support of the implication 

(IMPLIES (AND (IN <inhypotheses>) (OUT <outhypotheses>) ) C). 
This is done by finding the set of nodes in the foundations of C. This set is pruned by 
removing all of the fnhypotheses and oufhypotheses, as well any nodes that are 
repercussions of tnhypotheses or oufhypotheses. The remaining set of nodes is the set of 
support for the above implication. This set can be pruned further. Each of the nodes in 
this set has affected-consequences. Some of the affected-consequences are among the 
foundations of C. If all such affected-consequences of a node are in the derived set of 
support, the node can be removed from the set of support. This is admissible because the 
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node supports C only through other nodes in the set of support. This pruning leaves a 
reduced set of support which can be combined with the hypotheses to support C. 

FINDINDEP consists of two basic steps, each of which is a recursive scan of the 
foundations of the consequent C of the conditional proof. The first step consists of tracing 
backwards through the antecedents of C until tnhypotheses, oufhypotheses, or premises are 
reached. The search then follows the paths traced out in the opposite direction. Tracing 
upwards from the terminal nodes, the scan marks each of the nodes encountered that is 
either one of the hypotheses or is a repercussion of a hypothesis. At the end of this step, all 
unmarked nodes are in the set of support of C. The second step finds the reduced set of 
support. This step again traces backwards through the antecedents of C. This tracing stops 
when an unmarked node is reached, or when a hypothesis is reached. When an unmarked 
node is encountered, it is included in the reduced set of support. Finally, all of the marks 
are removed. The nodes collected as the reduced set of support are separated into a set of 
in nodes and a set of out nodes. These can be used to create a SL-justification to support 
the implication. 
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E. Backtracking 



"I should have more faith," he said; M I ought to know by this time that 
when a fact appears opposed to a long train of deductions it invariably 
proves to be capable of bearing some other interpretation." 

Sir Arthur Conan Doyle, A Study in Scarlet 



Systems engaging in hypothetical reasoning require mechanisms for reconciling 
beliefs upon the introduction of new hypotheses. Two types of hypotheses can be 
distinguished; speculative hypotheses and counterfactual hypotheses. Speculative 
hypotheses are those which are consistent with existing beliefs and justifications. 
Speculative hypotheses are useful when a lack of knowledge forces the making of an 
assumption for the purpose of exploration. Counterfactual hypotheses, on the other hand, 
contradict previous beliefs. Such hypotheses are useful in exploring the results of actions 
and in deriving constraints existing in different worlds. 

There is an overlap between these two forms of hypothetical in a truth 
maintenance system. This overlap results from the orientation of the truth maintenance 
system towards apparent consistency. Since the only notion of inconsistency is that of 
contradictions, any set of beliefs not supporting a contradiction node is considered 
consistent. New information added by the external system may later show these beliefs to be 
inconsistent. Thus what may have originally been speculative hypotheses may later be 
discovered to be counterfactual hypotheses requiring special treatment. This treatment is 
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called backtracking. 

The procedure for dealing with contradictions is to determine the set of 
hypotheses underlying the contradiction. This set is inconsistent, and the inconsistency is 
resolved by rejecting belief in one or more of these hypotheses. It is desirable to discard as 
few hypotheses as possible, so the handling of counterfactuals has been characterized as the 
selection of a maximal consistent subset of the set of inconsistent hypotheses. This process 
of selection requires domain-specific knowledge, since as far as logic and truth maintenance 
systems are concerned, premises are independent of all other beliefs. This independence 
means that there are no inherent relations to other beliefs which can be used in 
discriminating among premises in consistent subset selection. PMMCS 

Unlike premises, assumptions can be related to each other and to other beliefs. 
Assumptions can be related to the reasons for their introduction and to the specific lack of 
information which permits their belief. An inconsistency involving assumptions indicates 
not only that one of the assumptions must be retracted, but also that belief is justified in one 
of the nodes whose lack of valid justifications lead, through the assumption, to the 
inconsistency. Thus, an inconsistency can be used to derive new information which controls 
the introduction and consideration of further assumptions. 

These mechanisms are embedded in truth maintenance systems in two ways. The 
making of speculative hypotheticals and the necessary reconciliation of these hypotheses 
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with previous justifications for belief are handled by the normal mechanisms of assumption 
justifications and truth maintenance processing. Backtracking is implemented in a truth 
maintenance system as the method of dependency-directed backtracking. This method uses 
the dependency relationships to provide the raw material for the analysis and 
summarization of the inconsistent set of hypotheses. 

The first step in the process of dependency-directed backtracking is the 
recognition of an inconsistency by means of a contradiction. This is a node, justified by the 
inconsistent beliefs, which the external system declares to represent a false belief. All 
contradictions have the semantics of false, so there need be only one such contradiction 
node, with new inconsistencies recorded as new justifications for this node. As far as the 
truth maintenance system \% concerned there can be several representations for false, each of 
which is represented by a distinct contradiction node. 

The second step of backtracking is the determination of the inconsistent set of 
hypotheses underlying the contradiction. The wisdom of premises and monotonic 
justifications is inscrutable to the truth maintenance system. Therefore, the only hypotheses 
of interest to the backtracker are those based on incomplete knowledge. These are the 
assumptions. The assumptions are located by tracing backwards from the contradiction 
node through its antecedents, and watching for nodes which have out nodes among their 
antecedents. 
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Although the set of al[ the assumptions supporting the contradiction is easily 
calculable, recording the inconsistency of this set directly may be inefficient. There is a 
definite structure relating these assumptions. Since the support of nodes is well-founded, the 
nodes may be arranged into a partial order. In this partial order, one node is "less than" 
another node if the first is an antecedent of the second. The complete partial order is 
derived as the transitive closure of this antecedence-based relation. Some assumptions will 
be independent of other assumptions in this order. Other assumptions will be dependent on 
lower level assumptions. This information is useful, because only those assumptions which 
are maximal in this partial order should be considered for retraction. 

An assumption should not be retracted if the contradiction depends on it by 
means of other assumptions. The backtracking procedure only makes logically necessary 
retractions based on the observed occurrence of contradictions. In general, there is not 
enough information to logically rule out lower level assumptions. That is, assumptions are 
retracted using their inconsistency with the set of other assumptions in force as a reason. 
The retraction of non-maximal assumptions would then depend on the continued belief in 
the maximal assumptions which depend on the lower level assumption. Since these higher 
level assumptions will in general depend crucially on the lower assumption, the attempt at 
retraction must fail. 

Other types of information can also be derived from the partial order. These 
allow discriminations on the basis of the height of an assumption in the partial order, or on 
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the size of the component of the partial order containing the assumption. Different 
strategies for ranking the assumptions correspond to different local search strategies. For 
instance, retracting the maximal assumption of greatest height in the partial order might be 
interpreted as a kind of depth-first strategy. However, from a global perspective, 
dependency-directed backtracking is neither depth-first nor breadth-first, since the global 
search order is determined primarily by the history of the search, and not by the local order 
of choosing among alternative assumptions for retraction. 

The third step of backtracking is the summarization of the inconsistency of the set 
of hypotheses underlying the contradiction. Suppose that S - {A, B, ... , Z} is the set of 
inconsistent assumptions. The backtracker then creates a NOGOOD, a new node 
signifying that 5 is inconsistent. The NOGOOD represents the fact that 

A a ... a Z * false, 
or alternatively, that 

MAa ... A Z). 

5 is called the NOGOOD-set of the NOGOOD. The summarization is accomplished by 
justifying the NOGOOD with a conditional proof of the contradiction relative to the set of 
assumptions. In this way, the inconsistency of the set of assumptions is recorded as a node 
which will be believed even after the contradiction has been disposed of by the retraction of 
some hypothesis. Note also that the NOGOOD will depend on any non-maximal 
assumptions not included in the NOGOOD-set. This means that future backtracking can 
reject each of the assumptions in the NOGOOD-set and still have some assumptions left to 
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reject. 



The last step of backtracking uses the summarized cause of the contradiction, 
represented by the NOGOOD, to both retract one of the inconsistent assumptions and to 
prevent future contradictions for the same reasons. This is accomplished by deriving new 
justifications for the out nodes underlying the inconsistent assumptions. The new 
justifications will cause one of these out facts to become in, thereby causing one of the 
offensive assumptions to become out. This step is reminiscent of the justification of results 
on the basis of the occurrence of contradictions in reasoning by reductio ad 
absurdum.^"* inat0ricS 

These new justifications are constructed as follows. Let the inconsistent 

assumptions be A^ ... , A n . Let S iJt ... , S ik be the out nodes of the justification supporting 

belief in the assumption A v To effect the retraction of one of the assumptions, Ap justify 

Stf with the predicate 

(AND (IN NG Aj ... A H A ul ... A n ) (OUT S a ... 5^)), 

that is, 

(AND (IN <NOGOOD> <other assumptions in volved>) 
(OUT <other denials of this assumption >) ) 

This will ensure that the justification supporting A t by means of this set of out nodes will 

no longer be valid whenever the NOGOOD (NG) and the other assumptions are believed. 

This process may be repeated for each assumption in the inconsistent set to try to ensure 
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that the contradiction will be removed even if some of the assumptions in the nogood-set 
have alternate means of support. However, this strategy will create a circularity containing 
these new justifications. While later backtracking may make this unavoidable, the 
immediate creation of a circularity can be avoided by making only one new justification. 
This new justification will neutralize the justification of one of the assumptions. If other 
support can be found for this assumption, then backtracking is repeated. Presumably the 
new invocation of the backtracker wilt find that the previous culprit is no longer an 
assumption. Backtracking halts when the contradiction becomes out, or when no 
assumptions can be found underlying the contradiction. 
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IV. Discussion 



A. Summary of the Key Ideas 

The major point stressed here is that careful recording of the logical support for 
program beliefs permits many important efficiencies and capabilities in reasoning programs. 
We feel that truth maintenance systems should be thought of as a systemic function of 
problem solving systems. Just as pattern-directed data bases form a naturalty used 
subsystem of many problem solvers, so, we feel, should a truth maintenance system. 

This report has elaborated the structure and use of a non-monotonic dependency 
system for representing knowledge about beliefs, the mechanisms by which a truth 
maintenance system can employ this representation of knowledge to maintain beliefs 
consistent with recorded justifications, the application of dependency relationships in 
effecting backtracking, and mechanisms for separating levels of detail and their 
dependencies. 

The non-monotonic dependency system formalizes several ways of justifying 
beliefs including: premises, beliefs which are independent of other beliefs; deductions, 
beliefs derived from other beliefs; conditional proofs, beliefs summarizing the derivability 
of one belief from others; and assumptions, the non-monotonic justifications in which a 
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belief is based on a lack of contradictory knowledge. These basic representational 
techniques combine to allow perspicuous implementations of several common belief 
structures used in problem solving systems, including default assumptions, sets of 
alternatives and selectors of equivalence class representatives. 

Beliefs consistent with recorded justifications can be efficiently determined via 
truth maintenance, a process invoked whenever beliefs change due to the addition of new 
information or the retraction of hypotheses. Truth maintenance involves an examination of 
those beliefs explicitly linked, by means of the dependency system, to the changed beliefs. 
The truth maintenance system exercises the care required to avoid spurious beliefs produced 
by circularities among the justifications for beliefs. 

Exploiting all the facilities provided by the dependency and truth maintenance 
systems, dependency-directed backtracking examines the well-founded support recorded for 
beliefs involved in inconsistencies to determine the set of hypotheses underlying the 
inconsistency. Retraction of premises supporting an inconsistency is outside the domain of a 
truth maintenance system, but the dependency relationships involving non-monotonic 
assumptions can be analyzed to provide a basis for the retraction of assumptions. The 
causes of the inconsistency can be summarized via a conditional proof, and this summarized 
cause can then be used to retract one of the underlying assumptions. This is done by 
providing new knowledge which rules out belief in one of the assumptions. 
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Finally, the mechanism of conditional proof can be used to separate hierarchical 
levels of detail in explanations. The hierarchy is maintained by modifying arguments for 
beliefs. The modification consists of replacing a set of beliefs at one level by the set of 
higher-level beliefs from which they were derived. This is done by justifying information 
at one level in terms of the higher-level beliefs and the conditional proof of the 
corresponding information at the lower levels relative to the higher-level structures. This 
separation is important not only in improving the clarity of explanations, but in aiding 
processes like dependency-directed backtracking which must interrogate these explanations. 
In the case of dependency-directed backtracking, the separation of levels of detail reduces 
the number of belief involved in an inconsistency, thereby increasing the efficiency of the 
backtracking process. 
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B. Relation to Other Work 

There are systems oriented towards hierarchical representations of knowledge, but 
none of these systems deal with recorded justifications for beliefs. None of these systems 
address the problems raised by integrating the methods of truth maintenance and 
hierarchical representations of knowledge. 

There are several systems employing some form of data dependencies. One class 
of these uses explicit justifications for belief. These include the systems of Fikes [1975], 
McDermott [1975, 1977], Stallman and Sussman [1976], and London [1977]. Fikes' data base 
system records sets of support for deductions, and uses these in automatically erasing data 
derived from other erased data. His system does not use multiple justifications for single 
beliefs, and does not use the dependencies to control search. McDermott's earlier system also 
uses sets of supports as a data erasing mechanism, and allow multiple justifications for 
beliefs as well. These must lead to problems in his system, as no truth maintenance 
mechanism is used. McDermott's later system is somewhat more developed, but incorporates 
a number of extraneous forms of information into the recorded data dependencies, thereby 
obscuring the problems of truth maintenance and control. Stallman and Sussman's ARS 
electronics analysis system employs multiple sets of support and a monotonic truth 
maintenance system. ARS employs a mechanism for computing the sets of support of 
conditional proofs, but does not make these explicit as justifications. Instead of recording 
conditional proof justifications, the set of independent support is computed on the spot, and 
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never recomputed. ARS is a single-level system, and does not address the problem of 
separating levels of detail. London employs an extended Fikes-like dependency network in 
updating a simulation model. 

Another class of systems each use mechanisms suggestive of dependency 
mechanisms. These systems include Hayes' [1975] planning system^ Cox and Pietrzykowskfs 
[1976] theorem prover, and Srinivasan's [1976] MDS. Hayes* system is organized so that 
each decision made is associated with the set of other decisions which influenced the 
making of the decision. When surprises during plan execution invalidate a choice, these 
records are used to erase all decisions influenced by the invalid decision. Procedural 
methods seem to be used to connect decisions with the underlying domain knowledge. Cox 
and Pietrzykowski's graphical deduction system builds a proof in graph structure. When 
backtracking leads to the removal of a unification from the graph, the unification histories 
are employed to erase only that part of the graph that depended on the removed 
unification. Srinivasan's system associates with each assertion a set of other assertions 
which were accessed in checking the consistency of the assertion with the existing data base. 

Several systems employ forms of careful backtracking mechanisms. Stallman and 
Sussman's [1976] ARS system introduced the mechanism of dependency-directed 
backtracking. Katz and Manna [1976] use recorded dependencies between program 
invariants when an attempted proof of correctness fails. The dependencies are used first to 
search for a program statement to modify, and then to direct the updating of the other 
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invariants. Cox and Pietrzykowskfs [1976] graphical deduction system analyzes the 
unification histories recorded in building a proof graph. If progress is halted, the analysis 
performed by the backtracking algorithm indicates a unification which, if discarded, will 
allow further progress in the search. Nevins [1974] presents a theorem prover which 
examines the proof graph when a splitting attempt fails. Berliner's [1974] chess program 
uses a perturbation technique (called the Causality Facility) to analyze the dependence 
features of the board situation on past moves. He also proposed the use of "lemmas" to 
record the reasons for ruling out possible moves. These lemmas are similar in nature to 
domain-specific NOGOODs, as they specify the conditions under which a move is bound to 
be bad. Latombe [1976] has indicated that his TROPIC system also performs clever 
backtracking. 

One related mechanism is the context mechanism employed by CONNIVER 
[McDermott and Sussman 1974] and QA4 [Rulifson, Derksen and Waldinger 1973]. The 
basic objective of both context and truth maintenance systems is the ability to reason 
without confusion when using several mutually contradictory sets of beliefs. Such 
conflicting sets of beliefs arise in reasoning about sequences of actions and in reasoning 
about hypothetical assumptions. Context mechanisms are fortuitously useful for reasoning 
about sequences of actions. This is because action sequences generate trees of incrementally 
different situations, and context systems are structured into trees of incrementally different 
contexts. In addition to being similar in structure to the trees of situations arising from 
action sequences, contexts allow simultaneous access to distinct situations. This means that 
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the properties of objects in one situation can be compared to the properties of the objects in 
another. Because truth maintenance systems cannot easil) inspect different situations, 
reasoning about actions in a truth maintenance system is awkward. 

On the other hand, contexts are inappropriate for reasoning about hypothetical 
assumptions. Many hypotheticals are naturally independent. This allows changes of beliefs 
derived from one assumption to be unaffected by changes in beliefs in independent 
assumptions. Truth maintenance systems handle this easily. In context systems, 
hypothetical extensions of a context must be made in some particular order. This means 
that anomalous dependencies are unavoidable. Because of these anomalous dependencies, 
discarding one assumption by popping the corresponding context layer can result in 
discarding information derived from independent assumptions. This leads to the loss of 
useful information and wasted search efforts. Contexts can be viewed as approximating the 
logical dependencies between data. The problems introduced by the use of contexts are 
therefore avoided by using the logical dependencies themselves to compute beliefs, rather 
than the approximate relationships of context membership. 
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C. Future Work 

You know my methods. Apply them. 

Sir Arthur Conan Doyle, The Sign of Four 

Many of the topics discussed in this report offer opportunities for future 
exploration and elaboration. Some of these concern the use of a truth maintenance system 
in explanation and hypothetical reasoning. Other problems are in improving the technical 
details of implementing truth maintenance systems. This section discusses these areas for 
future research. 

A major application of the dependency relationships determined by a truth 
maintenance system is the explanation of computed entities in terms of the knowledge by 
which they were computed. The recorded justifications for beliefs only form the raw 
material from which explanations are to be constructed. The explanations produced by 
simple examinations of the justifications or foundations of beliefs are often cluttered with 
annoying details. Some of this unnecessary information can be removed by using the 
conditional proofs to restructure and summarize arguments. This report has indicated 
techniques for using this mechanism in structuring the knowledge of a program into 
hierarchical levels of detail, but much interesting work seems possible in developing 
techniques by which query routines can perform dynamic restructuring of arguments. 
These restructurings might take into account the knowledge available to the listener and the 
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purpose of the explanation. (Cf. [Carr and Goldstein 1977]) 

Several topics of interest concern domain-independent methods in hypothetical 
reasoning. As indicated in the discussion of backtracking, there are several possible criteria 
for analyzing the structure of assumptions involved in inconsistencies. Further exploration 
of backtracking schemes employing these criteria might provide added efficiencies in 
backtracking. Related topics include the use of the dependency relationships alone as 
measures of the strength or stability of arguments, and in estimating the effects of changes 
in beliefs. 

A theoretical problem arising in the system is the development of a formal 
semantics for nonmonotonic inference. Drew McDermott [personal communication] is 
developing one such semantics. 

The power of dependency-directed backtracking calls for integration of this 
method with knowledge-based methods of hypothetical reasoning. Programs with 
knowledge of the semantics of nodes can greatly increase the efficacy of the knowledge-free 
automatic methods by supplying measures for the soundness of premises and arguments in 
backtracking and differential diagnosis. McDermott's [1974] TOP LE program, for instance, 
constructs what might be called abductive data dependencies to explain away 
inconsistencies. It would be interesting to investigate such methods in a system which also 
provided the deductive justifications presented here. Similarly, knowledge of the meanings 
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of the premises involved might be used in methods for generalizing the information derived 
from inconsistencies into more widely applicable rules. 

On a technical level, there are several algorithmic improvements to be made in 
the basic truth maintenance process itself. Speedups in truth maintenance processing might 
be gained if a better understanding is developed of the best order for examination and the 
analysis of circularities is improved. Efficient (or even correct) methods for evaluating 
conditional proof justifications when their hypotheses are not valid and for switching 
between sets of hypotheses need to be developed. 100 Hard The use of multiple supporting- 
justifications for beliefs is a topic for study, especially with respect to the impact of such a 
mechanism' on the other truth maintenance mechanisms of backtracking and conditional 
proofs. Truth maintenance is an incremental process in the sense that only those beliefs 
affected by changes are updated, but there is another sense of incrementality in which the 
effects of changes in assumptions are calculated only if actually necessary. Unfortunately, 
the only methods I know for implementing such a call-by-need truth maintenance system 
require examining all beliefs, not just those affected by changes. David McAllester [1977] 
has developed a truth maintenance system based on a representation using propositional 
clauses in conjunctive normal form. This representation allows several algorithms (such as 
truth maintenance and dependency-directed backtracking) to be unified into one algorithm. 

One important problem is the detailing of methods integrating the use of 
dependencies with the sharing of data. Fahlman's [1977] NETL system avoids explosions of 
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computation space by using "virtual copies" of pieces of information. Straightforward 
schemes for using recorded justifications require explicit copies of the information, and 
cannot deal with shared structure. It would be very valuable to develop methods for this 
integration, perhaps of the nature of shared or virtually-copied dependency structures. 

Finally, there are many interesting applications of dependencies to problems of 
control in problem solving systems. Explicit justifications allow the separation of the control 
and the knowledge embodied by the problem solver, since the problem solver can make 
derived knowledge depend only on non-control information. At the same time, 
dependencies permit explicit linking of control decisions to the information and decisions 
they are based on, opening the possibility for careful failure analysis by the problem solving 
interpreter. (Cf. [de Kleer, Doyle, Steele and Sussman 1977]) There are many problems for 
investigation in explicit reasoning about the justifications themselves (for instance, in 
reasoning about the existence of multiple proofs for some result). 
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Notes 

AMQRD 

AMORD [de Kleer, Doyle, Rich, Steele and Sussman 1977] is a simple problem 
solving system devloped to illustrate the technique of using explicit control statements and 
dependencies in the control of reasoning, [de Kteer, Doyle, Steele and Sussman 1977] 

NOGOOD 

Records indicating sets of inconsistent assumptions were called NOGOODs in 
Stallman and Su$sman's [1976] ARS. 

Logics of Belief 

Hintikka [1962] and other philosophers have made extensive studies of the logics 
of knowledge and belief. A logic of beliefs seemingly related to that used in a truth 
maintenance system is discussed by Belnap [1976]. 

THNOT 

The non-monotonic assumption justification are the dependency system analogue 
of Micro-PLANNER's THNOT primitive. [Sussman, Winograd and Charniak 1971] Other 
related concepts are McCarthy and Hayes* [1969] CONSISTENT predicate, Sandewall's 
[1972] UNLESS predicate, and McDermott's [1977] PRESUMABLY. The non-monotonic 
assumption justifications have an advantage over these systems in that the nature of the 
assumption is made explicit and accessible in future deductions. This allow data derived 
from an assumption to be automatically discarded when new information overrides the 
assumption. 

NEEDCHOICE 

ARS [Stallman and Sussman 1976] represents the reasons for making assumptions 
as NEEDCHOICE assertions. Since ARS uses a monotonic dependency system, procedural 
mechanisms are necessary to connect these NEEDCHOICE assertions with the assumptions 
they control during backtracking and truth maintenance. 

Propagation 

Equivalence classes arise naturally when using methods which propagate 
information through a fixed knowledge structure. A good example is the EL electronic 
circuit analysis program. [Stallman and Sussman 1976] This program makes a fundamental 
use of coincidences and contradictions between voltages and currents in its method of the 
propagation of constraints. 

Interfaces 

The mechanism for separating levels of detail also applies to interfaces between 
independent systems. In these interfaces, each side of the boundary looks like a call on the 
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other side. Such interfaces can be described by using conditional proofs to transmit 
information in both directions. This requires that the names of each of the sides of the 
boundary to be attached to the boundary. 

Slices 

Slices [Sussman 1977] are a way of representing multiple overlapping views of 
objects. They provided a major source of the motivation for developing our methods of 
separating levels of detail in explanations. 

Complexity 

Part of the abstract problem of truth maintenance is to find an assignment of 
states to nodes consistent with a set of logical constraints relating these states. This is 
reminiscent of the problem of finding a satisfying assignment of values to variables in a 
propositional formula. It is easy to construct a correspondence between truth maintenance 
and the satisfaction of propositional formulas. I attempted to use such a correspondence to 
show that the problem faced by truth maintenance was NP-complete. [Cook 1971, Karp 
1972] I failed because the set of constraints relating beliefs is guaranteed to be satisfiable 
(since unsatisfiable constraints are ruled out as program bugs). This foiled my attempts to 
invoke the NP-completeness of problems like CNF-SAT and DNF-UNSAT in my proof. 

Efficiency 

There are several variations on the algorithm for truth maintenance presented 
here. The major dimension for variation concerns the order in which the graph of nodes 
and justifications is searched. Our algorithm uses a depth-first search. Other orders are 
possible. The most desirable would be one which always found support for the node being 
searched, and determined the set of nodes involved in circularities with as little trouble as 
possible. 

Analysis 

The efficiency of the relaxation process might be improved by using some form of 
analysis of circularities. For instance, the set of nodes left unsupported by the first step of 
truth maintenance can be analyzed as a graph to find the strongly connected components. 
These components are related by a partial order. The most efficient procedure would to 
determine support for nodes in the components which are minimal in this partial order, 
since these might provide support for node in non-minimal components. 

FINDINDEP 

This procedure was given the name FINDINDEP in Stallman and Sussman*s 

[1976] ARS system. 

PMMCS 

Nicholas Rescher [1964] presents a solution to the problem of counterfactual 
conditionals based on the concept of Preferred Maximal Mutually Compatible Subsets of 
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beliefs. His method partitions the set of all beliefs into compatible subsets of beliefs. Some 
of these sets may be preferable to others. For instance, if an inconsistency involves an 
experimental hypothesis and a law of nature, it is preferable to surrender the experimental 
hypothesis (as in "Back to the drawing board."). If such preferences were available to the 
dependency-directed backtracking system, it would be possible to retract premises as well as 
assumptions. On the other hand, one can argue that the partial order discrimination used 
in selecting assumptions for retraction is in fact a dynamically computed preference measure 
on the different out nodes involved in the inconsistency. 

Combinatorics 

Dependency-directed backtracking offers two main sources of efficiency over 
chronological backtracking methods, such as that used in Micro-PLANNER. [Sussman, 
Winograd and Charniak 1971] One advantage is that irrelevant choices made 
chronologically later than a faulty choice are ignored. This saves the system from 
considering many useless combinations of choices. In addition, it allows deductions made on 
the basis of faulty choices to be distinguished from those stemming from irrelevant choices. 
This means that the truth maintenance system need only discard those deductions based on 
retracted assumptions. Another advantage of dependency-directed backtracking is in the 
summarization of the inconsistency of certain sets of assumptions. Because these 
summarizations are valid beyond the existence of the inconsistency, the system automatically 
prevents any future set of assumptions from including the inconsistent set as a subset. This 
leads to the avoidance of more pointless combinations of assumptions. The power of 
dependency-direction is illustrated by Stallman and Sussman [1976], who present an example 
in which traditional methods of backtracking would consider a number of states equal to 
the the product of the sizes of the independent choice-sets. The use of dependency-direction 
reduces the number of states considered to the sum of the sizes of the independent choice- 
sets. G. J. Sussman has informed me of a specific example of interest. In a particular six 
transistor circuit, dependency-directed backtracking reduces the number of contradictions to 
only 2. This is using a standard heuristic order when choosing transistor states. 
Traditional backtracking methods might consider 3**6 = 729 states in this example. The 
number of contradictions increases to only 13 when the heuristically worst choice is made in 
each decision. 

Too Hard 

The problem of evaluating the validity of conditional proofs may be too hard in 
general. If the hypotheses of the conditional proof are not valid, that is, if the inhypotheses 
are not in and the ourhypotheses are not out, the evaluation requires switching beliefs so 
that the hypotheses are valid. This may require recursive truth maintenance, which in turn 
may call for further evaluation of conditional proof justifications. I have no algorithms for 
this process. It may be that the difficulty of this problem requires that such conditional 
proofs be left to the problem solver, reserving only the simple cases for the truth 
maintenance system. 
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Appendix 1. A TMS Glossary 



Aldiborontiphoscophornio! 

Where left you Chrononhotonthologos? 

Henry Carey, Chrononhotonthologos 

The AFFECTED-CONSEQUENCES of a node are those nodes whose current support- 
status rests on the node; precisely, those consequences of the node such that the node is a 
supporting-node of each of these consequences. 

The ANCESTORS of a node are those nodes involved at some level in determining the 
current support-status of the node; precisely, the transitive closure of the set of supporting- 
nodes of the node under the operation of taking supporting-nodes. 

ANOMALOUS CHRONOLOGICAL DEPENDENCIES are present when beliefs depend 
unnecessarily on other, logically independent beliefs. A good example of such anomalous 
dependencies are those seen in Micro-PLANNER, where each assertion depends on all 
chronologically previous choices, regardless of considerations of the logical relations between 
the assertion and the choices. 

The ANTECEDENTS of a node are those nodes which currently support beJief in the 
node. The antecedents of a node are the same as the SUPPORTING-NODES if the node 
is in. Nodes which are out have no antecedents. 

ASSUMPTIONS are nodes justified by non-monotonic justifications. The addition of new 
knowledge can cause the justifications for belief in assumptions to become invalid. 
Specifically, an assumption is a node believed on the basis of a lack of knowledge about 
some other belief. A typical form of an assumption is a node F whose justification is the 
predicate (OUT ~F), where ~F denotes the negation of F. In this case, belief in F will be 
justified as long as contradictory knowledge is not present. 

BACKT RACKING is the process of undoing a failure or inconsistency by retracting some 
premise or assumption underlying the failure or inconsistency. 

BELIEF in a node results from knowledge of a valid justification. 

CHRON OLOGY describes the dependence of actions on the temporal ordering of their 
execution. 
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CIRCULARITIES can occur in dependency relationships. These circularities require 
special processing during truth maintenance. 

CONDITIONAL PROOFS are justifications which support a belief if a specified belief 
(the consequent of the conditional proof) is believed when given specified hypotheses (the 
hypotheses of the conditional proof). 

The CONSEQUENCES of a node are those nodes such that the node occurs in an 
justification of each consequence. 

A CONTRADICTION is a node which has been designated as an inconsistency to the 
truth maintenance system. The backtracking mechanisms attempts to ensure that no 
contradiction is believed. 

The CP -CON SEQUENT-LIST of a node contains those nodes possessing a CP- 
JUSTIFICATION with the node as the consequent of the conditional proof. 

A DEDUCTION is a type of justification for belief in a node in which belief in the node is 
justified if each node in a designated set of nodes is believed. 

DEPENDENCIES are relationships between beliefs. The most generally useful 
dependencies in a truth maintenance system are the relations of ANTECEDENTS, 
CONSEQUENCES, SUPPORTING-NODES and AFFECTED-CONSEQUENCES. 

DEPENDENCY-DIRECTED describes processes, such as DEPENDENCY-DIRECTED 
BACKTRACKING, which operate on beliefs by searching through the nodes related by 
dependencies to the beliefs. 

FINDINDEP is a procedure for determining the set of nodes which are the independent 
support of a belief relative to a specified set of beliefs. This procedure is the basis far 
mechanisms dealing with summarization by conditional proofs. 

The FOUNDATIONS of a node are those nodes involved in the well-founded support for 
belief in the node; precisely, the transitive closure of the antecedents of the node under the 
operation of taking antecedents. 

A HYPOTHESIS is an underived belief, that is, either a PREMISE or an 
ASSUMPTION. Hypotheses of conditional proof justifications need not be premises or 
assumptions - they are just treated as such for the purposes of the conditional proof. 

IN describes the condition of a node which is believed to be true due to knowledge of a 
valid justification supporting this belief. 
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An JUSTIFICATION of a node is a representation of a reason for belief in the node. 
There are two basic representations used in the truth maintenance system presented here, 
called support-list justifications (SL-JUSTIFICATIONS) and conditional-proof justifications 
(CP-JUSTIFICATIONS). 

The IUSTIFICATION-SET of a node is the set of justifications for belief in the node. 

MONOTONIC TRUTH MAINTENANCE SYSTEMS are systems in which belief in a 
node cannot be predicated upon a lack of belief in some other node. 

A NODE is the fundamental entity to which justifications for belief can be attached. 

A NOGOOD is a node summarizing the independent support of a contradiction relative to 
the set of assumptions underlying the contradiction. 

A NOGOOD-SET is a set of assumptions designated to be inconsistent by a NOGOOD. 

NON-CHRONOLOGICAL describes processes in which the order of actions does not 
affect the results, so that the relationships between the data produced can be summarized in 
time-independent, logical terms. 

OUT describes the condition of a node for which no valid justifications are known. 

A PREMISE is a belief which depends on no other beliefs. 

The REPERCUSSIONS of a node are those other nodes whose support-statuses are 
affected at some level by the support-status of the node; precisely, the transitive closure of 
the affected-consequences of the node under the operation of taking affected-consequences. 

A SL-IUSTIFICATION consists of a two lists of nodes, the enlist and the ouf list. It is valid 
if each node in the enlist is in, and each node in the ouflist is out. 

The STATUS of a node normally refers to the SUPPORT-STATUS of the node. 

The SUPPORT for a belief is a generic term and may refer to the SUPPORTING- 
JUSTIFICATION, ANTECEDENTS, SUPPORTING-NODES, FOUNDATIONS or 
ANCESTORS of the node, depending on the context of usage. 

The SUPPORT-STATUS of a node is another name for the inness or oufness of the node. 

The SUPPORTING-IUSTIFICATION determines a proof of belief in the node in terms 
of other nodes with well-founded (non-circular) support. 
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The SUPPORTING-NODES of a node is the set of nodes affecting the current support- 
status of the node. 

TRUTH MAINTENANCE refers to the process by which beliefs are redetermined when 
other beliefs change due to the addition of new information or the retraction of premise. 

TRUTH MAINTENANCE SYSTEMS are systems in which beliefs are determined from 
recorded logical justifications. 

UNSATISFIABLE DEPENDENCY RELATIONSHIPS are cycles of justifications such 
that no assignment of in or out to the nodes involved is consistent with the justifications 
recorded for belief in the nodes. 

VALID IUSTIFICATIONS are justifications which as predicates evaluate to true. 

WELL-FOUNDED SUPPORT for a belief is an argument in terms of the recorded 
justifications from the basic premises and assumptions of the system upwards with no cycles 
in the arguments. 
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Appendix 2. Monotonia Truth Maintenance Systems 



In monotonic truth maintenance systems, no belief can depend upon other nodes 
being out. With this restriction, the inning of a node cannot cause the outing of another. 
Truth maintenance processing is simpler to implement in a monotonic system than in the 
non-monotonic system described in the text. The monotonic system also has many of the 
same uses and general properties. The basic limitation of the monotonic dependency system 
is its inability to model assumptions. The lack of non-monotonic justifications means that 
procedural mechanisms for making assumptions must be used. These procedural devices 
must be able to handle all the problems involving circularities that are exhibited in the 
non-monotonic system. The procedural mechanisms must be able to effect non-monotonic 
inferences, and connect assumptions with the reasons for being made. 

The representation of justifications can be simplified somewhat in a monotonic 
truth maintenances system. A SL-justification becomes a single list of nodes. CP- 
justifications have only one list of hypotheses. The concepts of consequences, supporting- 
justifications, supporting-nodes, ancestors and repercussions are as in the non-monotonic 
case. In a monotonic system, the list of supporting-nodes of a node is identical to the list of 
nodes in the supporting-justification. 
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The process of truth maintenance is simplified somewhat in a monotonic system. 
It is conveniently divided into two processes; outing and unoufing. The process of outing 
occurs whenever a node is changed from in to out. It proceedes by {1} making a list of the 
invoking node and its repercussions, {2} setting the support-status of each of these nodes to 
out, {3} removing the supporting-justifications from each of the nodes. After these steps 
have been performed for each of the nodes in the list, each of the nodes is unoufed. 

The unouting of a node proceeds by examining the justification-set of the node 
for an SL-justification containing only in nodes. If such an justification is found, it is made 
the supporting-justification of the node, the node's support-status becomes in, and all out 
consequences of the node are unoufed recursively. The handling of CP-justifications is 
essentially unchanged from that described previously for non-monotonic systems. 

The major effect of monotonicity is that the mechanisms for making and 
maintaining assumptions must be done by means external to the truth maintenance system. 
One method for effecting non-monotonic relationships is that of using forget and recall 
functions, which are functions attached to the node. A forget function is run whenever the 
attached node is oured, and a recall function is run whenever the attached node is inned. 
To implement the assumption of a node F using such functions, a forget function can be 
attached to ~F such that if ~F is oured, F will be made in (as a premise), along with a 
recall function on ~F which will out F (by retracting it) if ~F is inned. In addition, these 
functions should also check to make sure that the node representing the reason for making 
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the assumption is in. The use of a mechanism like this dangerous. Because functions are 
being used instead of explicit justifications, the recognition and handling of circularities and 
inconsistencies are obscured. Because of the chronological nature of these functions, no 
guarantee can be made that all feasible selections of statuses can be made in the event of 
circularities. Also, unsatisfiable circularities in the dependency structures may be 
undetectable, ensuring an infinite loop of assuming, unouring, ouring, and reassuming. 

Many of the applications of the general truth maintenance system are also possible 
using a monotonic system. The uses of dependencies in explanation, generalization and 
separation of levels of detail, and in dependency-directed backtracking are similar to those 
in the non-monotonic system. Backtracking is affected by the fact that assumptions can not 
be made through the use of the dependencies. Because of this, each node representing an 
assumption must be explicitly marked as such so that the backtracker can recognize it as an 
assumption. In addition, while nogoods are representable as before, the ruling out of 

inconsistent sets of assumptions cannot be done by means of new justifications, but must 

i 

operate by external mechanisms. 
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Appendix 3. An Implementation of a TMS 



This appendix presents the February, 1978 version of the TMS: A set of 
descriptions of the functions are provided, followed by the MacLISP programs. 



TMS-MAKE-NODE — (TflS-llfiKE-NODE <extern«l-na«ie>) 

This function creates a new TMS-node with a given name. 

TMS-SL-jUSTIFY — (TflS-SL-JUSTIFY <node> <insupporters> <ou t supporter i> <argui*ent>) 

This function gives a TMS node a new support-list type justification, which is valid 
if each of the nodes of the insupporters list is in, and each of the nodes of the oulsupporters 
list is out. The argument is an uninterpreted slot used to record the external form of the 
justification, and is retrievable via the TMS-JUSTIFICATION-ARGUMENT function 
described below. 

TMS-CP-IUSTIFY 

— (TflS-CP- JUSTIFY <node> consequent > <inhypotheses> <outhypotheses> <argu»ent>) 

This gives a TMS node a new justification which is valid if, when the ^hypotheses 
are in and the out hypotheses are out, the consequent node is believed. As in TMS-SL- 
JUSTIFY, the argument is an uninterpreted record of the external form of the justification. 

TMS-PROCESS-CONTRADICTION 

— (TflS-PROCESS-CONTRRDICTION <name> <node> <type> <contradict ion- function >) 

This declares a TMS node to represent a contradiction. The name and type are 
uninterpreted mnemonics provided by the external system to be printed out during 
backtracking. The contradiction-function, if supplied, should be a LISP function to be 
called with the contradiction node as its argument when the backtracker can find no 
backtrackable choicepoints. 

TMS-SUPPORT-STATUS - (tus-support-status <node>> 

This function returns the support-status/either 'IN or 'OUT, of a node. 

TMS-IUSTIFICATIONS - (TMS-justifications <node>> 

This function returns the list of justifications of the node. This list contains both 
the support-list and conditional-proof justifications attached to the node 

TMS-SUPPORTING-IUSTIFICATION - (THS-SUPPORTINC^USTIFICATION <nod.» 

This function returns the current justification of the node. 
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TMS-IUSTIFICATION-ARGUMENT - (ThS-JUSTIFICRTION-RRGUnENT < just i f icat ion>> 

This function returns the external argument associated with the given justification. 

TMS-ANTECEDENTS — (THS-antecedents <nod«>> 

This function returns the list of nodes determining well-founded support for the 
given node. This list is extracted from the supporting-justification if the node is in, and is 
empty if the node is out. 

TMS-CONSEQUENCES - (Tus-consequences <nod«>> 

This function returns the list of nodes whose list of antecedents mentions the given 
node. 

TMS-EXTERNAL-NAME — ctas-external-nahe <nod«>> 

This function returns the user-supplied name of a node. 

TMS-IS-IN - (TflS-IS-IN <nod«>> 

This predicate is true iff the node is in. 

TMS-IS-QUT — (THS-IS-OUT <node>> 

This predicate is true iff the node is out. 

TMS-RETRACT — (THS-retrrct <nod#>> 

This function will remove all premise-type justifications from the set of justifications 
of the node. 

TMS-PREMISES - (tus-prehises <nod«>> 

This function returns a list of the premises among the foundations of the node. 

TMS-ASSUMPTIONS — (Tfis-flssunPTiONS <nod«>> 

This function returns a list of the assumptions among the foundations of the node. 

TMS-INSTALL-SIGNAL-FORGETTING-FUNCTION 

— . (THS-INSTflLL-SIGNRL-FORGETTINC-FUNCTION <nodt> <fun>> 

This function sets the LISP function that the TMS will use to signal the changing 
of the support-status of the node from in to out. When such a change occurs, the supplied 
function will be called with the external name of the node as its argument 

TMS-INSTALL-SIGNAL-RECALLING-FUNCTION 

— (TflS-INSTflLL-SIGNRL-RECRLLING-FUNCTION <nod«> <fun>) 

This function sets the LISP function that the TMS will call with the node f s external 
name as its argument when changing the support-status of the node from out to in. 
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The TMS also generates new "facts" internally during backtracking. These will 
therefore occur in explanations and antecedents of the nod is requested and justified by the 
external systems. The internal facts generated by the TMS are atomic symbols with certain 
properties. The following functions are provided to manipulate these internal facts. 

TMS-FACTP ~ (TflS-FflCTP <thing>> 

This predicate is true iff the thing is an internal TMS fact. 

TMS-F ACT-NODE - <™s-fact-nooe <fact>> 

This function returns the TMS node associated with an internal fact 

TMS-F ACT-STATEMENT - (Tfis-FACT-STflTErtENT <fact>> 

This function returns the symbolic statement of the meaning of an internal fact 
This statement refers to the external names of th- other facts, such as contradictions and 
assumptions, which were involved in the making of the fact 



The following two functions are supplied for debugging purposes. 

TMS-INIT - (Tfis-INIT) 

This function clears the state of the TMS by resetting all internal variables and 
clearing all properties and internings of TMS nodes. 

The TMS has the following switches which may be set for wallpaper purposes. 

Variable ( Default value) 

*TMS-SEE-TMP-SW* <niu 

Announces truth maintenance processing. 

*TMS-SEE-TMP-INVOKER-SW* <t> 

Controls printing of nodes invoking truth maintenance processing if *TMS-SEE- 
TMP-SW* is set. 

*TMS-SEE-JUSTIFY-SW* (Nit) 

Announces the addition of a new justification for a node. 



*TMS-SEE-CONTRADICTIONS-SW* <T> 

Announces the processing of a contradiction. 



The program as follows uses several macros. 



is equivalent to 
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(LET ((vari initi) — (varn initn)) body) 

((LflflBOR (vari varn) body) initl initn). 

(EQCASE «xp (vail bodyl) ) 



is effectively equivalent to 

(COND ((eq exp 'vail) bodyl) ). 

The last clause in an EQCASE may begin with the value ELSE, which forms a catch-all 
clause at the end of the COND. The macro-character * quotes the following form, 
substituting in the values of any forms preceded by the macro-character , and inserting as a 
list segment the value of any form preceded by the macro character •. 



TRUTH MAINTENANCE SYSTEM GLOBAL VARIABLES 



APPNDX 3 P«q« 1 



881 
682 
883 
864 
885 
686 
887 
888 
889 
818 
811 
812 
813 
814 
815 
816 
817 
818 
819 
828 
821 
822 
823 
824 
825 
826 
827 
828 
829 
038 
831 
832 
833 
834 
835 
836 
837 
838 
839 
848 
841 
842 
843 
844 
845 
846 
847 
848 
849 
858 
851 
852 
853 
854 
855 
856 
857 
858 
859 
668 
861 
662 
863 
064 
065 



(COflflENT TRUTH MAINTENANCE SYSTEM GLOBAL VARIABLES) 



;;; THIS DECLARATION SPECIFIES ALL OF THE SWITCHES NECESSARY TO COMPILE THE TMS. 

;;; THESE INCLUDE THE LOADING OF A FILE OF MACROS USEO IN THE TEXT, AND DECLARATIONS 



;;; OF SOME LISP FUNCTIONS USED BY THE PROGRAM. 

(DECLARE (MAPEX T) 

(EXPR-HASH T) 

(MACROS NIL) 

(FASLOAD LINIT FASL DSK AMORD) 

(SPECIAL BASE *NOPOINT) 

(*FEXPR GCTUA)) 



;OPEN CODE LOOPS 
; ENABLE RECOMPILATION HACKS 
; RETAIN NO MACRO DEFINITIONS 
j LOAD IN MACROS 



THIS DECLARATION SPECIFIES ALL OF THE GLOBAL VARIABLES USED IN THE TMS. 

*TMS-NOTED-IN-NODES* IS USED DURING TRUTH MAINTENANCE TO ACCUMULATE A LIST 

OF ALL NODES EXAMINED BY TRUTH MAINTENANCE WHICH WERE IN UPON ENTRY TO 

THE EXAMINATION PROCESS. 

♦TMS-NOTED-OUT-NODES^ ACCUMULATES ENTERING OUT NODES DURING TRUTH MAINTENANCE. 

♦TMS-PROCESS-QUEUE* IS USED TO QUEUE UP NODES FOR EXAMINATION FOR WELL-FOUNDED 

SUPPORT DURING TRUTH MAINTENANCE. 

♦TMS-CONTRADICTION-ASSUMPTIONS* IS USED DURING BACKTRACKING TO ACCUMULATE AN ALIST 

OF ASSUMPTION NOOES AND THE LISTS OF OUT NODES THEY DEPEND UPON. 

*TMS-FINDINDEP-IN-LIST* ACCUMULATES IN NOOES DURING TMS-FINDINDEP PROCESSING. 

♦TMS-FINDINDEP-OUT-LIST* ACCUMULATES OUT NODES DURING TMS-FINDINDEP PROCESSING. 

♦TMS-SEE-JUSTIFICATIONS-SW* CONTROLS WALLPAPER PRINTING DURING THE TMS-XX- JUSTIFY 

FUNCTIONS. 

*TMS-SEE-TMP-SW* CONTROLS WALLPAPER PRINTING DURING THE MAIN TRUTH MAINTENANCE FUNCTION. 
;;; ♦TMS-SEE-TMP-INVOKER-SW* CONTROLS WALLPAPER PRINTING DURING THE MAIN TRUTH MAINTENANCE 
;;; FUNCTION OF WHICH NOOE CAUSED TRUTH MAINTENANCE. 

♦TMS-SEE-CONTRADICTIONS-SW* CONTROLS WALLPAPER PRINTING OF BACKTRACKING DUE TO 
;;; CONTRADICTIONS. 
;;; *TMS-SEE-CULPRITS-SW* CONTROLS WALLPAPER PRINTING OF THE ASSUMPTIONS UNDERLYING 

CONTRADICTIONS DURING BACKTRACKING. 

♦TMS-GENS* STORES THE CURRENT GENSYH NUMBER. 

♦THS-GENS-LISU ACCUMULATES A LIST OF ALL SYMBOLS GENSYMED BY TMS-GENS. 

♦TMS-INTERN-SW* CONTROLS THE INTERNING OF GENSYMED SYMBOLS HADE BY TMS-GENS. 

STIMULATE IS A FUNCTION CALLED WHEN A NODE GOES FROM IN TO OUT DURING TRUTH MAINTENANCE. 
IT IS GIVEN THE EXTERNAL NAME OF THE NOOE AS ITS ARGUMENT. 

DESTIMULATE IS A FUNCTION CALLED WHEN A NODE GOES FROM OUT TO IN DURING TRUTH MAINTENANCE. 
IT IS GIVEN THE EXTERNAL NAME OF THE NODE AS ITS ARGUMENT. 

(DECLARE (SPECIAL ♦TMS-NOTEO-IN-NODES* 
♦TMS-NOTED-OUT-NODES* 
*TMS-PROCESS-QUEUE* 

•TMS-CONTRADICTION-ASSUMPTIONS* 

♦TMS-FINDINDEP-IN-LIST* 
♦TMS-F IND INDEP-OUT-L 1ST* 

*TMS-SEE-TMP-SW* 
*THS-SEE-TMP-INVOKER-SW* 
♦THS-SEE-JUSTIFICATIONS-SW* 
*TMS-SEE-CONTRADICTIONS-SW* 
♦TMS-SEE-CULPR ITS-SW* 

♦TMS-GENS* 

♦THS-GENS-LIST* 

♦TMS-INTERN-SW*) 



(*EXPR STIMULATE 

DESTIMULATE)) 



THIS FUNCTION IS THE MEANS BY UHICH THE TMS GENERATES NEU SYMBOLS. 

THE SYMBOLS GENERATED ARE RECORDEO ON A LIST TO FACILITATE REINITIALIZATION. 

NORMALLY, THE SYMBOLS ARE NOT INTERNED. 

BASE AND *NOPOINT ARE SPECIAL LISP VARIABLES. 

THEIR REBINDING AVOIDS PROBLEMS DUE TO USER SETTINGS OF THESE VARIABLES. 
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"Hal ~ 

002 

683 

884 

885 

886 5 ; 

887 

888 (DEFUN TMS-GENS (X) 

889 (SETQ *TMS-GENS* (U *TMS-GENS*>> 
818 ((LAMBDA (NAME) 

811 (AND *TMS-INTERN-SU* (INTERN NAME)) 

812 (SETQ ♦THS-GENS-LIST* (CONS NAME *TMS-GENS-LIST*>> 

813 NAME) 

814 (MAKNAM (APPEND MT M S -) 

815 (AND X (NCONC (EXPLODEC X) '(-))> 

816 ((LAMBDA (BASE ♦NOPOINT) 

817 (EXPLODEC *TMS-GENS*)> 

818 8. T))))) 
819 
828 (SETQ *TMS-GENS* 8) 

821 (SETQ *TMS-GENS-LIST* NIL) 

822 (SETQ *TMS-INTERN-SW* NIL) 
823 

824 ;;; THESE INITIALIZE THE SYSTEM SUITCHES CONTROLLING UALLPAPER PRINTING. 
825 

826 (SETQ *TMS-SEE-TMP-SU* NIL) 

827 (SETQ *TMS-SEE-TMP-INVOKER* NIL) 

828 (SETQ *TMS-SEE-JUSTIFICATIONS-SU# NIL) 

829 (SETQ *TMS-SEE-CONTRADICTIONS-SU* T) 
838 (SETQ ♦TMS-SEE-CULPRITS-SU* NIL) 
831 

832 ;;; THIS FUNCTION INITIALIZES THE INTERNAL STATE OF THE TMS. 

833 ;;; IT CAN BE CALLED ANY NUMBER OF TIMES. 

834 ;;; AFTER IT IS CALLED, NO TMS DATA STRUCTURES SHOULD REMAIN 

835 in EXCEPT THOSE POINTED TO BY USER VARIABLES. 
836 

837 (DEFUN TMS-INIT () 

838 (SETQ *TMS-NOTED-IN-NODES* NIL) 

839 (SETQ *TMS-NOTEO-OUT-NOOES* NIL) 
848 (MAPC ' (LAMBDA (G) (MAKUNBOUND G) (SETPLIST G NIL) (REMOB G>) 

841 *TMS-GENS-LIST*) 

842 (SETQ *TMS-GENS-LIST* NIL) 

843 (SETQ *TMS-GENS* 0) 

844 (GCTMA T) 

845 »DONE) 
846 
847 (TMS-INIT) 
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881 
082 
883 
884 
88S 
886 
887 
888 
889 
818 
811 
812 
813 
814 
815 
816 
817 
818 
819 
828 
821 
822 
823 
824 
825 
826 
827 
828 
829 
838 
831 
832 
833 
834 
835 
836 
837 
838 
839 
848 
841 
842 
843 
844 
845 
846 
847 
848 
849 
858 
851 
852 
053 
854 
855 
856 
857 
858 
859 
868 
861 
862 
863 
864 
865 
866 
867 
068 
069 
070 



(COMMENT TRUTH MAINTENANCE DflTR STRUCTURES) 

;;; TMS NODES HAVE THE FOLLOWING ATTRIBUTES KEPT IN A SPECIAL DATA STRUCTURES 

;;; TMS-FINDINDEP-MARK 

;;; THIS IS A BIT USED TO INDICATE WHETHER THE NOOE IN QUESTION HAS BEEN 

;;; EXAHINEO BY THE TMS-FINDINDEP SWEEP PHASE. 

;; TMS-SUBORDINATES-HRRK 

;; THIS BIT IS USED IN THE UPWARD PHASE OF THE TMS-FINDINDEP PROCESS 

;} TO MARK EACH NODE WHICH HAS ANY OF THE HYPOTHESES OF THE CONDITIONAL 

;; PROOF OR THEIR CONSEQUENCES AflONC ITS SUPPORTERS. 

;; TMS-SUPERIORS-HRRK 

;; THIS IS A THREE-WAY INDICATOR USEO DURING BACKTRACKING TO SHOW WHETHER THE 

; ; NODE HAS ASSUMPTIONS AMONG ITS CONSEQUENCES, OOES NOT HAVE SUCH CONSEQUENT 

j; ASSUMPTIONS, OR HAS NOT BEEN EXAMINED YET. 

;;; TMS-THP-HRRK 

;;; THIS BIT SHOWS WHETHER THE NODE IS QUEUED UP TO BE EXAMINED DURING TRUTH 

;;; MAINTENANCE PROCESSING. IT SAVES DOING A MEMQ DOWN A FREQUENTLY LARGE LIST. 

TMS-NOTEO-MRRK 

THIS BIT SHOWS WHETHER THE NOOE HAS BEEN REACHEO BY THE CURRENT INVOCATION 

, ,, OF TRUTH MAINTENANCE. IT SAVES DOING A MEMQ DOWN ANOTHER FREQUENTLY LARGE LIST. 

; ; ; TMS-SUPPORT-STRTUS 

;;; THIS THREE-WAY INDICATOR SHOWS WHETHER THE NOOE IS IN, OUT, OR IS STILL BEING 

;;; EXAMINED (NIL). 

;;; TMS-SL-JUSTIFICATIONS 

Hi THIS IS A LIST OF ALL OF THE SUPPORT-LIST JUSTIFICATIONS POSSESSEO BY THE NODE. 

;;; TMS-CP-JUSTIFICATIONS 

;;; THIS IS A LIST OF ALL OF THE CONDITIONAL -PROOF JUSTIFICATIONS POSSESSEO BY THE NODE. 

;;; TMS-SUPPORTING-JUSTIFICATION 

;;; THIS IS A POINTER TO THE CURRENTLY SUPPORTING JUSTIFICATION IF THE NODE IS IN, 

;;; OR NIL IF THE NODE IS OUT. THE POINTER IS ALWAYS TO A SUPPORT-LIST JUSTIFICATION, 

;;; NEVER TO A CONDITIONAL PROOF JUSTIFICATION. CP-JUSTIFICATIONS ARE CONVERTED TO 

;;; SL-JUSTIFICATIONS USING TMS-FINDINDEP. 



;; 

i 9 

;; 
;;; 



TMS-SUPPORTING-NODES 

THIS IS A LIST OF ALL NOOES USEO IN DETERMINING THE STATUS (IN OR OUT) OF THE NOOE. 
IF THE NOOE IS IN, IT IS JUST THE LIST OF ALL NOOES MENTIONED IN THE SUPPORTING 
JUSTIFICATION OF THE NODE. IF THE NOOE IS OUT, IT CONTAINS ONE NODE FROM EACH OF THE 
JUSTIFICATIONS IN THE SL AND CP SETS, SUCH THAT EACH OF THESE NODES IS RESPONSIBLE 
FOR THE INVALIDITY OF THE CORRESPONDING JUSTIFICATION. 



;;; TMS-CONSEQUENCES 

;;; THIS IS A LIST OF ALL NODES WHICH MENTION THE PARTICULAR NOOE IN ONE OR MORE 

IH OF THEIR JUSTIFICATIONS. 



;;; 

;;; 
n » 
;;; 
;;; 



TMS-EXTERNAL-NAME 

THIS IS THE THING IN THE EXTERNAL SYSTEM TO WHICH THE NODE IS CONNECTEO. ALL 
SIGNALLING FUNCTIONS, WHICH SIGNAL THE EXTERNAL SYSTEM OF CHANCES OF STATUS, 
USE THIS EXTERNAL NAME AS THEIR ARGUMENTS. THAT IS, THE EXTERNAL SYSTEM IS 
NOTIFIED IN TERMS OF ITS OWN DATA STRUCTURES, AND NOT IN TERMS OF THE INTERNAL 
TMS NODES. 



H; TMS-NODE-HARK 

;;; THIS IS A BIT USED TO IMPROVE THE EFFICIENCY OF THE ALGORITHMS USED TO MANIPULATE 

;;; SETS OF NODES. 



9 9 9 

;;; 
;;; 
n; 
;h 



THS-EXPLAIN-MARK 

THIS IS A BIT USED TO IMPROVE THE EFFICIENCY OF THE EXPLANATION ALGORITHMS. IT 
SERVES BASICALLY THE SAME FUNCTION AS TMS-NODE-HARK, BUT IS A DIFFERENT BIT SO 
THAT EXPLANATIONS PRODUCEO DURING BREAKPOINTS, ETC. HILL NOT SCREW UP ONGOING 
SET COMPUTATIONS. 
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882 ;;; THE FOLLOWING ATTRIBUTES OF NOOES ARE KEPT ON THE PROPERTY LISTS OF NOOESi 
603 

884 ;;; TMS-SIGNAL-RECALLING-FUNCTION 

885 ;;; THIS OPTION HAY BE ATTACHED TO ANY NODE AS A FUNCTION TO BE CALLED WITH THE 

886 ;;; EXTERNAL NAME OF THE NODE AS ARGUMENT WHENEVER THE NODE CHANGES STATUS FROfl 

887 ;;; OUT TO IN. 

888 ;;; IT IS IGNORED IF IT IS THE SYMBOL 'IGNORE. 
889 

818 ;;; TflS-SIGNAL-FORGETTING-FUNCTION 

811 ;;; THIS OPTION MAY BE ATTACHEO TO ANY NODE AS A FUNCTION TO BE CALLED WITH THE 

812 ; ; ; EXTERNAL NAME OF THE NOOE AS ARGUMENT WHENEVER THE NOOE CHANGES STATUS FROM 

813 ;;; IN TO OUT. 

814 ;;; IT IS IGNORED IF IT IS THE SYMBOL 'IGNORE. 
815 

816 ;;; TMS-CP-JUSTIFICATIONS 

817 ;;; AS DESCRIBED ABOVE. MOST NOOES WON'T HAVE ONE, SO IT ISN'T IN THE BASIC NOOE STRUCTURE, 
818 

819 ;;; TMS-CP-CONSEQUENT-LIST 

828 ;;; THIS IS A LIST ATTACHED TO A NOOE IF THE NOOE IS THE "CONSEQUENT" OF ANY CONDITIONAL 

821 ;;; PROOF JUSTIFICATIONS. IF SUCH JUSTIFICATIONS EXIST, THE NODES THEY JUSTIFY ARE PUT 

822 ;;; ON THIS LIST. THIS IS TO DETERMINE THAT FINDINDEPS SHOULO BE DONE TO PRODUCE NEW 

823 ;;; SUPPORT-LIST JUSTIFICATIONS FROM CONDITIONAL PROOF JUSTIFICATIONS WHEN THE CONSEQUENTS 
024 ;;; OF THE CONDITIONAL PROOFS COME IN. 

825 

826 ;j; TMS-CONTRADICTION-NAME 

827 ;;; THIS IS ATTACHEO TO A NODE WHICH IS A CONTRADICTION. IT IS SOME ARBITRARY 

828 ;; ; OBJECT THE EXTERNAL SYSTEM HAS CALLEO THE NAME OF THE CONTRADICTION. 
8?9 

838 ;;; TMS-CONTRADICTION-TYPE 

831 ;;; THIS IS ATTACHEO TO A NODE WHICH IS A CONTRADICTION. IT IS SOME ARBITRARY 

832 ;;; OBJECT THE EXTERNAL SYSTEM HAS CALLED THE TYPE OF THE CONTRADICTION. 
833 

834 ;,; TMS-CONTRADICTION-HARK 

835 ;;; THIS IS A MARK USED TO DISTINGUISH NODES DECLAREO TO BE CONTRADICTIONS FROfl 

836 ;;; NORMAL NODES. 
837 

838 ;;; TMS-CONTRADICTION-FUNCTION 

839 ;;; THIS IS AN OPTIONAL ATTACHMENT TO A CONTRADICTION NODE WHICH CAN POINT TO 

848 ;;; A FUNCTION TO CALL WITH THE EXTERNAL NAME OF THE CONTRADICTION AS ARGUMENT 

841 ;; | WHENEVER THE CONTRADICTION NOOE COMES IN AND NO ASSUMPTIONS CAN BE FOUND 

842 ;;; AMONG ITS SUPPORTERS - THAT IS, A CONTRADICTION WHICH CAN'T BE REMOVED. 
843 

844 5;; TMS-CONTRADICTION-NOGOODS 

845 ;;; THIS IS A PIECE OF DEBUGGING INFORMATION ATTACHED TO CONTRADICTIONS WHICH 

846 ;;; LISTS THE NOGOODS THAT HAVE BEEN PRODUCED IN RESPONSE TO THE CONTRAOICTIOW 

847 ;;; COMING IN. 
848 

849 ;;; TMS-NOGOOO-ASSUHPTIONS 

858 ;;; THIS IS A PIECE OF DEBUGGING INFORMATION ATTACHED TO NOGOODS WHICH LIST 

851 ; ; ; THE ASSUMPTIONS FOUND BY THE BACKTRACKER FOR THE CONTRADICTION WHICH 

852 ;;; PRODUCED THE NOGOOD. 
853 

854 ;;; TMS-NOGOOD-CONTRAOICTION 

855 ;;; THIS PIECE OF DEBUGGING INFORMATION ATTACHES THE CONTRADICTION THAT PRODUCEO 

856 ; ; ; A NOGOOD TO THAT NOGOOD. 
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eei 

082 
083 
884 
885 
886 
887 
888 
889 
818 
811 
812 
813 
814 
815 
816 
817 
818 
819 
828 
821 
822 
823 
824 
825 
826 
827 
828 
829 
838 
831 
832 
833 
834 
835 
836 
837 
838 
839 
848 
841 
842 
843 
844 
845 
846 
847 
848 
849 
858 
851 
052 
053 
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;;; CURRENT STORAGE 0RGRNI2RTI0N OF THE SPECIAL ORTfl STRUCTURE* 

TflS NOOES RRE HUNKS, ORGANIZED RS FOLLOUS: 

THE TUO BITS FIELOS RRE USED TO STORE THE VARIOUS SMALL MARKERS AS 

PARTS OF FIXNUMS. THERE ARE TUO SUCH FIELOS SO THAT THE FIXNUHS 

INVOLVED MILL BE SMALL ENOUGH TO NOT REQUIRE NUMBER-CONS I NG. 

AN ADDITIONAL NOTE* AS MILL BE DESCRIBED LATER, NOGOODS ARE NOT NOOES, 

BUT ARE SYMBOLS UITH NOOES ATTACHEO. 



;;; 



SLOT 



USE 



8 PROPERTY LIST 

1 TMS-EXTERNAL-NAME 

2 TMS-SL-JUSTIFICATIONS 

3 TMS-SUPPORTING-JUSTIFICATION 

4 TMS-SUPPORTING-NOOES 

5 TMS-CONSEQUENCES 

6 TMS-BITS1 

TMS-NODE-MARK 

TMS-TMP-MRRK 

TMS-NOTED-MARK 

TMS-FINDINDEP-MARK 

TMS-SUBOROINATES-MARK 

THS-EXPLAIN-MARK 

7 TMS-BITS2 

TMS-SUPPORT-STATUS (2 BITS) 
TMS-SUPERIORS-MARK <2 BITS) 



HI THIS MACRO IS USED TO ALTER COMPONENTS OF DATA STRUCTURES. 
;;; THE FORMAT IS (MAKE (COMPONENT OBJECT) VALUE). 



(DEFMAC MAKE (X Y) 

(CONS (IMPLODE (APPEND '(TltS-tlRK 
(APPEND (CDR X) (LIST Y)))) 



E -) (CDDDDR (EXPLOOEC (CAR X))))) 



;;; THIS MACRO PRODUCES ACCESSING FUNCTIONS FOR HUNK STRUCTURES. 

(DEFMAC HUNKFN (NAME SLOT) 

(LET ((CN (IMPLODE (APPEND MT H S - H A K E -) (CDODOR (EXPLOOEC NAME)))))) 
"(PROGN 'COMPILE 

(DEFUN ,NAME (NOOE) 

(CXR ,SLOT NODE)) 
(DEFUN ,CN (NODE NEM) 

(RPLACX ,SLOT NODE NEM))))) 

(HUNKFN TMS-EXTERNAL-NAME 1) 
(HUNKFN TMS-SL-JUSTIFICATIONS 2) 
(HUNKFN TMS-SUPPORTING-JUSTIFICATION 3) 
(HUNKFN TMS-SUPPORTING-NODES 4) 
(HUNKFN TMS-CONSEQUENCES 5) 
(HUNKFN TMS-BITS1 6) 
(HUNKFN TMS-BITS2 7) 
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801 

882 5n THESE FUNCTIONS DEFINE THE VARIOUS BIT STRUCTURES USEO IN NOOES. 
003 

804 ;;; THIS flACRO PRODUCES ACCESSING FUNCTIONS FOR BIT STRUCTURES, 
005 

006 (DEFMAC BITFN (NAME POS) 

HI (LET ((CN ClttPLODE (APPEND ' (T M S - H A K E -) (CDODDR (EXPLODEC NAME)))))) 

888 "(PROGN 'COMPILE 

889 (DEFUN ,NAME (NODE) 

8 { 8 (BTON (TMS-BITSi NODE) ,POS)) 

811 (DEFUN ,CN (NOOE NEU) 

!f 2 <COND (NEU (HAKE CTMS-BITSi NOOE) 



013 



l\t < T <"«KE (TMS-BITSI NODE) 



(BOR (TMS-BITSI NODE) ,POS))) 



(BCLR (TMS-BITSI NOOE) ,POS)) )))))) 



015 
016 

017 (BITFN TMS-NODE-MARK 1.) 

018 (BITFN TMS-TMP-MARK 2.) 

019 (BITFN TMS-NOTED-MARK 4.) 

020 (BITFN TMS-FINDINDEP-MARK 8.) 

021 (BITFN TMS-SUBORDINATES-MARK 16.) 

022 (BITFN TMS-EXPLAIN-MARK 32.) 
023 

824 ;;, THESE DEFINE THE REMAINING MULTI-BIT FIELOS. 
825 

826 (DEFUN TMS-SUPPORT-STATUS (NODE) 

827 (LET ((V (BAND (TMS-BITS2 NOOE) 3.))) 

828 (COND ((» V 1.) 'OUT) 

829 (U V 2.) 'IN)))) 
030 

031 (DEFUN TMS-MAKE-SUPPORT-STATUS (NOOE NEU) 

HI (C0N0 <(E Q U *L NEU MN) (MAKE (THS-BITS2 NODE) (BOR (BCLR (TMS-BITS2 NODE) 3.) 2.))) 

ll 3 A < EQUfiL NEU ^UT) (MAKE (TMS-BITS2 NODE) (BOR (BCLR <TflS-BITS2 NOOE) 3.) 1.))) 

Ht <T (nRKE <TMS-BITS2 NOOE) (BCLR (TNS-BITS2 NODE) 3.))))) 

036 (DEFUN TMS-SUPERIORS-MARK (NOOE) 

837 (LET ((V (BAND (TMS-BITS2 NOOE) 12.))) 

8 38 (COND (U V 4.) 'NO) 

839 ((. V 8.) 'YES)))) 
040 

841 (DEFUN TMS-MAKE-SUPERIORS-MARK (NOOE NEU) 

842 (COND ((EQUAL NEU 'YES) (MAKE (TNS-BITS2 NODE) (BOR (BCLR <THS-6ITS2 NOOE) 12.) 8.»> 

It 3 . r E ?^c N ^l N 2 > mKE ( ™ S -* ITS2 N00E > <MR (BCLR (THS-BITS2 NOOE) 12.) 4.))) 

844 <T (MAKE (THS-BITS2 NOOE) (BCLR (THS-BITS2 NOOE) 12.))))) 
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881 

882 ;;; THIS MACRO IS USED TO OEFINE ACCESSING FUNCTIONS FOR PROPERTY-LIST STRUCTURES, 
883 

884 (DEFMAC ACCESSFN (SLOTN PROPN) 

885 (LET ((CNAflE (IMPLODE (APPENO »(T MS-MAKE-) (COOOOR (EXPLOOEC SLOTN))))) 

886 (PN (OR PROPN SLOTN))) 

887 "(PROGN 'COMPILE 

888 (OEFUN , SLOTN (NODE) (GET NODE ',PN)) 

889 (DEFUN ,CNAME (NODE NEU) 

818 (COND (NEU (PUTPROP NOOE NEU \PN)) 

811 (T (REMPROP NOOE \PN) )))))) 

812 

813 (ACCESSFN TMS-SIGNAL-RECALLING-FUNCTION) 

814 (ACCESSFN TMS-SIGNAL-FORGETTING-FUNCTION) 

815 (ACCESSFN TMS-CP-JUSTIFICATIONS) 

816 (ACCESSFN TMS-CP-CONSEQUENT-LIST) 

817 (ACCESSFN TMS-CONTRADICTION-NAME) 

818 (ACCESSFN TMS-CONTRADICTION-TYPE) 

819 (ACCESSFN TMS-CONTRAOICTION-HARK) 
828 (ACCESSFN TMS-CONTRADICTION-FUNCTION) 

821 (ACCESSFN TMS-CONTRADICTION-NOGOODS) 

822 (ACCESSFN TMS-NOGOOD-ASSUMPTIONS) 

823 (ACCESSFN TMS-NOGOOO-CONTRAOICTION) 
824 

825 ;;; THESE FUNCTIONS INSTALL SIGNALLING FUNCTIONS AND THEM CALL THEM IF REQUIRED. 
826 

827 (DEFUN TMS-INSTALL-SIGNAL-FORGETTING-FUNCTION (NODE FUN) 

828 (MAKE (TMS-SIGNAL-FORGETTING-FUNCTION NODE) FUN) 

*29 (AND FUN (THS-IS-OUT NOOE) (FUNCALL FUN (TMS-EXTERNAL-NAME NODE)))) 

838 

831 (DEFUN TMS-INSTALL-SIGNAL-RECALLING-FUNCTION (NODE FUN) 

832 (MAKE (TMS-SIGNAL-RECALLING-FUNCTION NOOE) FUN) 

33 (AND FUN (TMS-IS-IN NODE) (FUNCALL FUN (TMS-EXTERNAL-NAME NODE)))) 

834 

835 ;;; THIS FUNCTION GENERATES A VIRGIN NODE UITH A GIVEN EXTERNAL NAME* 

836 ;;; SINCE IT HAS NO JUSTIFICATIONS, IT IS OUT. 
837 

838 (DEFUN TMS-MAKE-NODE (NAME) 

839 (LET ((NODE (MAKHUNK 8.))) 

848 (MAKE (TMS-SUPPORT-STATUS NODE) 'OUT) 

841 (MAKE (TMS-EXTERNAL-NAME NODE) NAME) 

842 NODE)) 



THE FOLLOWING DEFINE THE STRUCTURE OF JUSTIFICATIONS. 

JUSTIFICATIONS ARE ALWAYS PAIRS: THE FIRST PART OF WHICH IS THE INTERNAL 

THS DATA STRUCTURE, AND THE SECOND PART OF UHICH IS THE EXTERNAL REPRESENTATION 

OF THE JUSTIFICATION. 

THE OIFFERENT TYPES OF WAYS A SUPPORTING NODE CAN AFFECT A JUSTIFICATION ARE 

EXPLICIT IN THE STRUCTURE OF THE JUSTIFICATION. THUS WITHIN ANY SUBLIST 

(THE THS-SL-JUSTIFICATION-INLIST, FOR EXAHPLE), THE ORDER OF THE NODES 

LISTED CANNOT MATTER. 
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681 

882 

883 

884 

885 

886 

887 

808 

889 

818 

811 ;;; GENERAL PAIR STRUCTURE; 

812 

813 (DEFUN THS-JUSTIFICATION-ARGUHENT (JUST) (COR JUST)) 

814 (DEFUN THS-JUSTIFICATION (JUST) (CAR JUST)) 
815 

816 ;;; SUPPORT-LIST (SL) JUSTIFICATION STRUCTURE: 
817 

818 (DEFUN THS-SL-JUSTIFICATION-INLIST (JUST) (CAR (THS-JUSTIFICATION JUST))) 

819 (DEFUN THS-SL-JUSTIFICATION-OUTLIST (JUST) (CDR (THS-JUSTIFICATION JUST))) 

828 (DEFUN THS-HAKE-SL-JUSTIFICATION (INLIST OUTLIST EXTARG) (CONS (CONS INLIST OUTLIST) EXTARG)) 

821 

822 ;; ; CONDITIONAL-PROOF (CP) JUSTIFICATION STRUCTURE: 

823 

824 (DEFUN TMS-CP-JUSTIFICATION-CONSEQUENT (JUST) (CAR OTIS-JUSTIFICATION JUST))) 

825 (DEFUN THS-CP-JUSTIFICATION-IN-HYPOTHESES (JUST) (CAOR (THS-JUSTIFICATION JUST))) 

826 (DEFUN THS-CP-JUSTIFICATION-OUT-HYPOTHESES (JUST) (COOR (THS-JUSTIFICATION JUST))) 

827 (OEFUN THS-HAKE-CP-JUSTIFICATION (CONSEQUENT INHYPOTHESES OUTHYPOTHESES EXTARG) 

828 (CONS (CONS CONSEQUENT (CONS INHYPOTHESES OUTHYPOTHESES)) EXTARG)) 
829 

838 

831 

832 

833 

834 

835 

836 

837 

638 

839 (DEFUN THS-SL-JUSTIFICATION-HEHBER (JUST JUSTS) 

648 (DO (US JUSTS (CDR JS))) 

841 ((NULL JS)) 

342 (AND (EQUAL (THS-JUSTIFICATION-ARGUHENT JUST) 

843 (THS-JUSTIFICATION-ARGUHENT (CAR JS))) 

844 (THS-EQUAL-LIST (THS-SL-JUSTIFICATION-INLIST JUST) 

845 (THS-SL-JUSTIFICATION-INLIST (CAR JS))) 

846 (THS-EQUAL-LIST (THS-SL-JUSTIFICATION-OUTLIST JUST) 

847 (THS-SL-JUSTIFICATION-OUTLIST (CAR JS))) 

848 (RETURN T)))) 
849 
858 ;;;CP 

851 (OEFUN THS-CP-JUSTIFICATION-HEHBER (JUST JUSTS) 

852 (DO ((JS JUSTS (CDR JS))) 

853 ((NULL JS)) 

854 (AND (EQ (THS-CP-JUSTIFICATION-CONSEQUENT JUST) 

855 (THS-CP-JUSTIFICATION-CONSEQUENT (CAR JS))) 

856 (EQUAL (THS-JUSTIFICATION-ARGUHENT JUST) 

857 (THS-JUSTIFICATION-ARGUHENT (CAR JS))) 

858 (THS-EQUAL-LIST (THS-CP-JUSTIFICATION-IN-HYPOTHESES JUST) 

859 (THS-CP-JUSTIFICATION-IN-HYPOTHESES (CAR JS))) 
868 (THS-EQUAL-LIST (THS-CP-JUST IF I CAT ION-OUT-HYPOTHESES JUST) 

861 (THS-CP-JUSTIFICATION-OUT-HYPOTHESES (CAR JS))) 

862 (RETURN T)))) 
863 

864 ;;; THIS IS EQUAL SPECIALIZED FOR LISTS TREATING HUNKS AS ATOHS. 
865 

866 (DEFUN THS-EQUAL-LIST (X Y) 

867 (PROG () 

868 LP (CONO ((NULL X) (RETURN (NULL Y))) 
369 ((NULL Y) (RETURN NIL)) 
378 ((EQ (CAR X) (CAR Y)) 

371 (SETQ X (COR X)) 

372 (SETQ Y (CDR Y)) 

373 (CO LP)) 

374 (T (RETURN NIL))))) 



THESE FUNCTIONS PREVENT RECORDING DUPLICATE JUSTIFICATIONS FOR NODES. 
HY THEORY OF THIS IS TRADITIONALLY FUZZY. IN A SYSTEH LIKE THE CURRENT 
ONE IN WHICH THERE ARE EXTERNAL FORHS FOR JUSTIFICATIONS, IT SEEHS LIKE 
JUSTIFICATIONS WITH DISTINCT EXTERNAL FORHS SHOULD BE HAINTAINED SEPARATELY, 
SINCE THE RETRACTION OF ONE EXTERNAL FORH HIGHT NOT HEAN THE RETRACTION OF 
ALL INTERNALLY-IDENTICAL JUSTIFICATIONS. IN A SINGLE-PURPOSE, INTEGRATED 
SYSTEH SOHE BETTER STRATEGY HIGHT BE POSSIBLE. 



TRUTH fIRINTENRNCE DATA STRUCTURES 
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881 
002 
003 
004 
005 
006 
007 
008 
009 
010 
011 
012 
013 
014 
015 
016 
017 
018 
019 
020 
021 
022 
023 
024 
025 
026 
027 
028 
029 
030 
031 
032 
833 
034 



THESE DEFINE THE FORMAT OF INTERNALLY GENERATED FACTS (LIKE NOGOODS, ETC.) 

DUE TO THE FACT THAT CONTRADICTIONS HAY COME IN SEVERAL TIMES, THE TMS 

MUST BE ABLE TO GENERATE INTERNAL NOOES FOR NOGOODS. SINCE THESE MILL OCCUR 

IN EXPLANATIONS IN THE EXTERNAL SYSTEM, EITHER THE IMPLEMENTATION DETAILS 

OF TMS NODES (AS HUNKS OR PLISTS, ETC.) MUST BE MADE AVAILABLE TO THE EXTERNAL 

USER, OR ELSE A SIMPLE EXTERNAL STRUCTURE CAN BE GENERATEO FOR THESE NODES. 

I HAVE TAKEN THE LATTER APPROACH. NOGOODS ARE SYMBOLS (CALLED INTERNAL FACTS). 

THEY HAVE A SYMBOLIC ASSERTION-LIKE STATEMENT ATTACHED TO THEM, OENOTING THE 

REASONS FOR THEIR CREATION, AS WELL AS A TMS NOOE ATTACHED. 



;;; THIS FUNCTION CHECKS UHETHER AN ATOM IS AN INTERNAL TMS FACT. 

(ACCESSFN TMS-FACTP) 

;;$ THIS FUNCTION GETS THE STATEMENT OF AN INTERNAL TMS FACT. 

(ACCESSFN TMS-FACT-STATEHENT) 

;;; THIS FUNCTION GETS THE TMS NOOE OF AN INTERNAL TMS FACT. 

(ACCESSFN TMS-F ACT-NODE) 

; ; ; TMS-MAKE-FACT GENERATES A NEU INTERNAL FACT OF A GIVEN TYPE 
HI (UHICH IS SPLICED INTO THE NAME OF THE FACT) AND A STATEMENT. 

(DEFUN TMS-MAKE-FACT (TYPE STATEMENT) 
(LET ((FACT (TMS-GENS TYPE))) 
(MAKE (TMS-FACTP FACT) T) 

(MAKE (TMS-FACT-NOOE FACT) (TMS-MAKE-NODE FACT)) 
(MAKE (TMS-FACT-STATEMENT FACT) STATEMENT) 
(MAKE (TMS-SIGNAL-RECALLING-FUNCTION FACT) 'IGNORE) 
(MAKE (TMS-SIGNAL-FORGETTING-FUNCTION FACT) 'IGNORE) 
FACT) ) 
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882 (COflrtENT TRUTH HfllNTENflNCE SUPPORT FUNCTIONS) 
883 

884 ; ; ; THE ANTECEDENTS OF A NODE IS THE SET OF OTHER NOOES IN ITS Iflf1EDIATE WELL-FOUNOEO 

885 ; ; ; SUPPORT. OUT NOOES HAVE NO WELL-FOUNDED SUPPORT, AND SO NO ANTECEDENTS. 
886 

887 (DEFUN TflS-ANTECEDENTS (NODE) (AND (TflS-IS-IN NOOE) (TflS-SUPPORTING-NOOES NODE))) 

888 

889 ;;; TflS-IS-IN AND THS-IS-OUT TEST SINGLE NODES FOR INNESS OR OUTNESS. 

818 

811 (DEFUN TflS-IS-IN (NODE) (EQ (TflS-SUPPORT-STATUS NOOE) MN)) 

812 (DEFUN TflS-IS-OUT (NOOE) (EQ (TflS-SUPPORT-STATUS NODE) 'OUT)) 
813 

814 ;;; TflS-ARE-IN AND TflS-ARE-OUT TEST LISTS OF NODES TO SEE IF ALL ARE IN OR OUT. 
815 

816 (DEFUN TflS-ARE-IN (NODES) 

817 (DO ((NL NOOES (CDR NL))) 

818 ((NULL NL) T) 

©19 (OR (TflS-IS-IN (CAR ND) (RETURN NIL)))) 
828 

821 (DEFUN TflS-ARE-OUT (NODES) 

822 (DO ((NL NOOES (CDR NL))) 

823 ((NULL NL) T) 

024 (OR (TflS-IS-OUT (CAR ND) (RETURN NIL)))) 
825 

826 ;;; THIS FUNCTION RETURNS A LIST OF ALL JUSTIFICATIONS POSSESSED BY A NODE. 
827 

828 (DEFUN TflS-JUSTIFICATIONS (NODE) 

829 (APPEND (TMS-SL-JUSTIFICATIONS NODE) (TflS-CP-JUSTIFICATIONS NOOE) NIL)) 
838 

831 ;;; THIS FUNCTION ADDS A NODE TO THE LIST OF CONSEQUENCES OF A NOOE 

832 ;;; IF IT WASN'T THERE ALREAOY. 
833 

834 (DEFUN TflS-ADO-CONSEQUENCE (NOOE CONSEQUENCE) 

©35 (OR (flEflQ CONSEQUENCE (TflS-CONSEQUENCES NODE)) 

836 (HAKE (TflS-CONSEQUENCES NODE) 

©37 (CONS CONSEQUENCE (TflS-CONSEQUENCES NODE))))) 

838 

839 ; ; ; TflS-AFFECTEO-CONSEQUENCES RETURNS A LIST OF JUST THOSE CONSEQUENCES 

848 ;;; OF A NOOE WHICH ACTUALLY flENTION THE NOOE IN THEIR CURRENT SUPPORTING-NODES. 

841 ;j; THIS IS ALL THE NODES WHICH ACTUALLY DEPEND ON THE GIVEN NODE OIRECTLY. 

842 

843 (DEFUN TflS-AFFECTED-CONSEQUENCES (NOOE) 

©** (DO ((CL (TflS-CONSEQUENCES NOOE) (CDR CD) 

845 (ANS NIL)) 

846 ((NULL CL) ANS) 

©47 (AND (flEflQ NOOE (TflS-SUPPORTING-NOOES (CAR CD)) 

848 (PUSH (CAR CL) ANS)))) 

849 

858 ;;; TflS-AFFECTS-NODES IS BASICALLY THE PREDICATE (NOT (NULL (TTOS-AFFECTED-CONSEQUENCES X)H. 

851 ;n SINCE IT JUST TESTS FOR THE EXISTENCE OF AFFECTED CONSEQUENCES, IT DOESN'T HRVE TO CONS. 

o52 

853 (DEFUN TflS-AFFECTS-NODES (NOOE) 

©54 (00 ((CL (TflS-CONSEQUENCES NODE) (CDR CD » 

855 ((NULL CL) NIL) 

©56 (AND (flEflQ NODE (TflS-SUPPORTING-NOOES (CAR CD)) (RETURN T)))) 

857 

858 ;;; TflS-BELIEVEO-CONSEQUENCES RETURNS A LIST OF ALL IN NOOES AMONG THE AFFECTEO CONSEQUENCES 

859 ;;; OF A NODE. 
868 

861 (DEFUN TflS-BELIEVEO-CONSEQUENCES (NODE) 

©62 (DO ((CL (TflS-CONSEQUENCES NOOE) (COR CD) 

©63 (ANS NIL)) 

©64 ((NULL CL) ANS) 

©65 (AND (flEflQ NODE (TflS-ANTECEDENTS (CAR CD)) 

©66 (PUSH (CAR CL) ANS)))) 



. TRUTH MAINTENANCE SUPPORT FUNCTIONS 



681 

002 

083 

084 

885 

886 

887 

688 

869 

818 

611 

812 

613 

814 

815 

816 

817 

818 

819 

828 

821 

822 

823 

824 

825 

626 

827 

828 

829 

838 

831 

632 

833 

834 

835 

836 

837 

838 

639 

848 

841 

842 

843 

844 

645 

846 

847 

848 

649 

656 

851 

852 

853 

854 

855 

856 

857 

858 

859 

868 

861 

862 

663 

664 

665 

866 

667 

868 

669 

678 

871 

872 

873 

874 

875 

676 
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;;; THE FOLLOWING FUNCTIONS RETURN RLL NODES OF THE SPECIFIED TYPE 
;;; IN RELRTIONSHIP TO THE GIVEN NODE. 

;;; THIS RETURNS RLL NODES RERCHED BY RECURSIVELY TRUING RNTECEOENTS. 
; ; } TMS-MRRK-FOUNDRTIONS COLLECTS UP R NON-REPETITIVE LIST, RND 
;;; TflS-FOUNDRTIONS UNMRRKS AND RETURNS THE LIST. 

(DEFUN TMS-FOUNORTIONS (NODE) 

(LET ((NODELIST (MRPCRN 'TMS-MRRK-FOUNDRTIONS (TMS-RNTECEDENTS NODE)))) 
(MRPC '(LRMBDR (N) (MAKE (THS-EXPLRIN-MRRK N) NIL)) 
NODELIST))) 

(DEFUN TMS-MRRK-FOUNDRTIONS (NOOE) 

(COND ((NULL (TMS-EXPLRIN-MRRK NODE)) 

(MAKE (TMS-EXPLRIN-MRRK NODE) T) 

^CONS NODE (MRPCRN ' TMS-MRRK-FOUNORTIONS (TMS-RNTECEDENTS NODE)))))) 

;;; THIS RETURNS RLL NODES RERCHED BY RECURSIVELY TAKING BELIEVEO CONSEQUENCES. 
;;; TMS-MRRK-REPERCUSSIONS COLLECTS UP fl NON-REPETITIVE LIST, AND 
;;; TMS-RLL-REPERCUSSIQNS UNMRRKS RND RETURNS THE LIST. 

(DEFUN TflS-REPERCUSSIONS (NODE) 

(LET ((NODELIST (MRPCRN ' TflS-flflRK-REPERCUSSIONS (TMS-BELIEVED-CONSEQUENCES NOOE)))) 
MRPC '(LRMBDR (N) (MAKE (TMS-EXPLAIN-MARK N) NIL)) 
NODELIST))) 

(DEFUN TMS-MARK-REPERCUSSIONS (NODE) 

(COND ((NULL (TMS-EXPLAIN-MARK NODE)) 

(MAKE (TMS-EXPLAIN-MARK NODE) T) 

(CONS NODE (fIRPCRN 'TMS-MARK-REPERCUSSIONS (THS-BELIEVEO-CONSEQUENCES NODE)))))) 

;;; TMS-PREMISES AND ITS SUBFUNCTIONS COLLECT UP A LIST OF ALL PREHISES IN 
;;; THE RECURSIVE WELL-FOUNDED SUPPORT OF A NOOE. PREMISES ARE NODES WHICH 
;;; ARE IN BUT DEPEND ON NO NOOES (THAT IS, HAVE NO ANTECEDENTS.) 

(DEFUN TMS-PREMISES (NOOE) 

(LET ((PL (TMS-PREMISES1 NOOE))) 
(Tf1S-PREf1ISES2 NOOE) 
PL)) 

(DEFUN TMS-PREMISES1 (NODE) 

(COND ((NOT (TMS-EXPLAIN-MARK NODE)) 

(MAKE (TMS-EXPLAIN-MARK NODE) T) 

(COND ((TflS-ANTECEDENTS NODE) (flAPCAN 'TMS-PREMISES1 (TftS-ANTECEDENTS NODE))) 
(T (AND (TflS-IS-IN NODE) (LIST NODE))))))) 

(DEFUN TMS-PREflISES2 (NODE) 

(COND ((TflS-EXPLAIN-MARK NODE) 

(MAKE (TMS-EXPLAIN-flARK NOOE) NIL) 

(MRPC , Tf1S-PREMSES2 (TflS-RNTECEOENTS NODE))))) 

; ; ; TflS-RSSUMPTIONS AND ITS SUBFUNCTIONS COLLECT UP ALL ASSUMPTIONS INVOLVED 

;;; IN THE WELL-FOUNDED SUPPORT OF A NODE. ASSUMPTIONS ARE NODES WHICH ARE IN ANO DEPENO 

;;; UPON OTHER NODES WHICH ARE OUT, THAT IS, DEPEND UPON INCOMPLETE INFORMATION. 

(DEFUN TMS-ASSUMPTIONS (NODE) 

(LET ((AL (TMS-ASSUMPTI0NS1 NODE))) 
(TMS-ASSUMPTI0NS2 NOOE) 
AD) 

(DEFUN TMS-ASSUMPTI0NS1 (NOOE) 

(COND ((NOT (TMS-EXPLRIN-HRRK NODE)) 

(MAKE (TMS-EXPLAIN-MARK NODE) T) 
(PROG (FLAG ANS) 

(MAPCAN '(LAMBDA (A) 

(COND ((TMS-IS-OUT A) (SETQ FLAG T)) 

(T (SETQ ANS (NCONC (TMS-ASSUHPTI0NS1 A) ANS))))) 
(TMS-ANTECEDENTS NOOE)) 
(RETURN (COND (FLAG (CONS NOOE ANS)) 
(T ANS))))))) 

(DEFUN TMS-ASSUMPTI0NS2 (NODE) 

(COND ((TMS-EXPLAIN-MARK NOOE) 

(MAKE (TMS-EXPLAIN-MARK NODE) NIL) 

(MAPC 'THS-ASSUMPTI0NS2 (TMS-ANTECEDENTS NODE))))) 



TRUTH flfllNTENRNCE SUPPORT FUNCTIONS flPPNOX 3 Paq« 12 

"001 

002 ;;; THIS KLUDGE TAKES A LIST OF NODES RNO CLOBBERS IT TO BE A NON-REPETITIVE LIST 

003 ;;; OF THE SAME NODES. THE SPECIAL CRSE OF TUO OR FEUER NOOES IN THE LIST IS HANDLED 

004 n? SPECIALLY FOR SPEED. 

005 

006 (DEFUN TflS-NODE-SET-CONDENSE (L) 

007 (COND ((NULL L) NIL) 

008 ((CODR L) 

009 (PROG (PTR NEXT) 

010 (SETQ PTR L) 

011 (SETQ NEXT (COR D) 

012 (HAKE (TMS-NODE-HARK (CAR PTR)) T) 

013 LP (CONO ((NULL NEXT) 

014 (tlAPC MLAflBDA (E) (HAKE (THS-NODE-HARK E) NIL)) L) 

015 (RETURN L>> 

016 ( (Tf1S-NODE-r»ARK (CAR NEXT)) 

017 (LET ((A (CDR NEXT))) 

018 (RPLACO PTR A) 

019 (SETQ NEXT A)) 

020 (GO LP)) 

021 (T (SETQ PTR NEXT) 

022 (SETQ NEXT (COR NEXT)) 

023 (MAKE (THS-NODE-HARK (CAR PTR)) T) 

024 (GO LP))))) 

025 ((EQ (CAR L) (CADR D) (CDR D) 

026 (T L))) 
027 

028 ;;; THIS FUNCTION PRINTS A HESSAGE AND NODE FOR UALLPAPER t DEBUGGING PURPOSES. 
029 

030 (OEFUN TflS-PRINT (TEXT NODE) 

031 (TERPRI) (PRINC TEXT) (PRINC '| |) (PRIN1 (THS-EXTERNAL-NRHE NODE))) 
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881 

882 (COnilENT TRUTH flRINTENRNCE SYSTEM COMMANDS) 
883 

384 ;;; TMS-SL-JUSTIFY CRN BE USED TO SUPPLY R NEU JUSTIFICATION FOR 

385 ;;; R NODE, RND TO THEN DETERMINE ITS SUPPORT STATUS. IF THE NOOE 
886 5J; LACKS UELL FOUNDED SUPPORT, TRUTH MAINTENANCE OCCURS. 



THERE IS RN EXTRA LAYER OF HAIR INVOLVED IN ALL THE MAJOR EXTERNAL FUNCTIONS. 

THE BASIC PROBLEM IS THAT SUPERFLUOUS STATUS CHANGE SIGNALLING SHOULD BE 

AVOIDED. SINCE ONE INVOCRTION OF TRUTH MRINTENRNCE CRN TRIGGER OTHER INVOCATIONS, 

DUE TO CONTRRDICTIONS RND CONDITIONRL PROOFS, THIS MEANS THAT ALL STATUS CHANGE 

SIGNALLING SHOULD BE OELAYEO UNTIL THE ACTUAL RETURN TO THE EXTERNAL SYSTEM. 

THIS REQUIRES THAT THERE BE INTERNAL VERSIONS OF THE FUNCTIONS FOR JUSTIFYING NOOES, 

INVOKING BACKTRACKING, ETC. THE EXTERNAL VERSIONS ALL CONSIST OF R RATHER 

STRNDRRD BLOCK OF CODE WRAPPED RROUND THE CRLL TO THE INTERNAL VERSION. 



887 
888 

889 ;; 

818 ;; 

811 ;; 

812 ;; 

813 ;; 

814 ;; 

815 ;; 

816 

817 ;;; TMS-SL-JUSTIFY RETURNS NIL IF NO CHANGE IN STATUS OCCURRED, T OTHERHISE. 
818 

819 (DEFUN TMS-SL-JUSTIFY (NODE INS OUTS EXTARG) 
®28 (LET ( UTMS-NOTEO-IN-NOOES* NIL) 

821 UTMS-NOTED-OUT-NODES* NIL) 

*22 (OLDSTATUS (TMS-SUPPORT-STATUS NOOE))) 

23 (TMS-SL-JUSTIFY1 NOOE INS OUTS EXTARG) 

824 (TMS-TMP-SCAN) 

825 (TMS-SIGNAL-CHANGES) 

020 (NOT (EQ OLOSTATUS (TMS-SUPPORT-STATUS NOOE))))) 

827 

828 ;; , TMS-SL-JUSTIFY1 RETURNS T IF THE JUSTIFICATION CAUSES TRUTH MRINTENRNCE, NIL OTHERHISE. 
829 

838 (DEFUN TMS-SL-JUSTIFY1 (NOOE INS OUTS EXTRRG) 

031 <LET ((JUST (TMS-MRKE-SL-JUSTIFICRTION INS OUTS EXTRRG))) 

032 (COND ((LET ((JS (TMS-SL-JUSTIFICRTIONS NODE))) 

033 <COND ((NOT (TMS-SL-JUSTIFICRTION-MEHBER JUST JS)) 

lit <"RKE <TMS-SL-JUSTIFICflTIONS NODE) (NCONC JS (LIST JUST))) 

835 T ))) 

030 (HAPC '(LAMBDA (N) (TMS-ADO-CONSEQUENCE N NODE)) INS) 

037 ("APC '(LAMBDA (N) (THS-ADD-CONSEQUENCE N NOOE)) OUTS) 

03 * (AND *TMS-SEE-JUSTIFICATIONS-SU* (TMS-PRINT »| JUSTIFYING! NODE)) 

039 (EQCASE (TMS-SUPPORT-STATUS NODE) 

* (IN NIL) 

J*i (OUT (EQCRSE (THS-UF-EVAL-SL-JUSTIFICRTION JUST) 

**l (YES (TMS-TMP (LIST NODE)) T) 

843 (NO (THS-INSTRLL-UF-SUPPORT NOOE) NIL)))))))) 
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CP 
TMS-CP-JUSTIFY CRN BE USED TO PROVIDE R CONDITIONRL-PROOF JUSTIFICATION 
FOR R NODE. THE CONDITIONAL PROOF IS OF THE FORH "THE SUPPORT 
OF CONSEQUENT RELRTIVE TO THE HYPOTHESES." IT IS EQUIVALENT TO R SUPPORT 
LIST JUSTIFICATION CONTAINING THE OTHER NODES SUPPORTING SUCH R PROOF. 

888 55; TMS-CP-JUSTIFY RETURNS NIL IF NO CHANGE IN STATUS OCCURRED, T OTHERUISE. 
089 

818 (DEFUN TMS-CP-JUSTIFY (NODE CONSEQUENT INHYPOTHESES OUTHYPOTHESES EXTRRG) 
*** (LET ( (*TMS-NOTED-IN-NODES* NIL) 

a *2 <*TMS-NOTED-OUT-NOOES* NIL) 

013 (OLDSTRTUS (TMS-SUPPORT-STATUS NODE))) 

*}* (TMS-CP-JUSTIFY1 NODE CONSEQUENT INHYPOTHESES OUTHYPOTHESES EXTRRG) 

®15 (TMS-TMP-SCAN) 

316 (TMS-SIGNAL-CHANGES) 

817 <NOT (EQ OLDSTRTUS (TMS-SUPPORT-STATUS NODE))))) 
818 

819 (OEFUN TMS-CP-JUSTIFY1 (NODE CONSEQUENT INHYPOTHESES OUTHYPOTHESES EXTRRG) 

II* (LET ((JUST <TMS-HAKE-CP-JUSTIFICATION CONSEQUENT INHYPOTHESES OUTHYPOTHESES EXTRRG))) 

H 1 <COND ((LET ((JS (THS-CP-JUSTIFICATIONS NOOE))) 

HI <COND ((NOT (THS-CP-JUSTIFICATION-NEMBER JUST JS)) 

Hi <n«KE (TNS-CP-JUSTIFICATIONS NODE) (NCONC JS (LIST JUST))) 

824 T))) 

HI <««KE (TMS-CP-CONSEQUENT-LIST CONSEQUENT) 

ill <CONS NODE (TMS-CP-CONSEQUENT-LIST CONSEQUENT))) 

827 (TflS-RDO-CONSEQUENCE CONSEQUENT NOOE) 

HI <"«PC '(LAMBDA (N) (THS-ADD-CONSEQUENCE N NODE)) INHYPOTHESES) 

HI <"APC ' (LAMBDA CN) (THS-ADO-CONSEQUENCE N NODE)) OUTHYPOTHESES) 

ll* <«WD ♦THS.SEE-JUSTIFICRTIONS-SU* (THS-PRINT ' IJUSTIFYINCI NODE)) 

ll* <AND (EQ (TMS-SUPPORT-STATUS NOOE) 'OUT) 

ill (EQCRSE (THS-UF-EVAL-CP-JUSTIFICATION JUST) 

833 ( YES 

H^ (L ^T ((SUPPORT 

HI (THS-FINDINDEP 

11* (THS-CP-JUSTIFICRTION-CONSEQUENT JUST) 

Z*i (THS-CP-JUSTIFICRTION-IN-HYPOTHESES JUST) 

HI (THS-CP-JUSTIFICRTION-OUT-HYPOTHESES JUST)))) 

Ifl (TNS-SL-JUSTIFY1 NOOE (CRR SUPPORT) (COR SUPPORT) 

ll* (THS-JUSTIFICATION-ARGUHENT JUST)))) 

841 <N0 (THS-INSTRLL-WF-SUPPORT NODE)))))))) 
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881 ~ ~"~ — " " a 

882 ;;; TMS-RETRACT REMOVES A PREMISE JUSTIFICATION FROM A NODE. 

883 ;;; ACTUALLY, IT IS NOT QUITE RIGHT AT PRESENT, SINCE A RETRACTION 

884 ;;; SHOULD SPECIFY THE EXACT EXTERNAL FORM OF THE PREMISE JUSTIFICATION 

885 ;;; TO BE RETRACTED, LEAVING OTHER PREMISE JUSTIFICATIONS UNTOUCHEO. 

886 ;;; THIS UOULO OBVIATE THE HAIR PRESENTLY EXISTING WHICH CHECKS TO AVOID 

887 ; 5; REMOVING PREMISE JUSTIFICATIONS DERIVED FROM CONDITIONAL PROOF JUSTIFICATIONS. 
888 

889 ;;; PROBABLY THIS MEANS THAT TMS-RETRACT SHOULD BE GENERALIZED TO REMOVE 

818 ;;; ANY TYPE OF JUSTIFICATION, GIVEN THE EXTERNAL FORM OF THE JUSTIFICATION 

811 ;;; AS ARGUMENT. 

812 

813 (DEFUN TMS-RETRACT (NOOE) 

314 (LET < <*TMS-NOTEO-IN-NODES# NIL) 

315 UTMS-NOTED-OUT-NODES* NIL) 

8 16 (OLDSTATUS (TMS-SUPPORT-STATUS NOOE))) 

317 (TMS-RETRACT1 (LIST NODE)) 

818 (TMS-THP-SCAN) 

319 (TMS-SIGNAL-CHANGES) 

328 (NOT (EQ OLDSTATUS (TMS-SUPPORT-STATUS NOOE))))) 

821 

822 ;;;CP 

823 (DEFUN TMS-RETRACT1 (NODELIST) 

824 (DO ((NL NODELIST (CDR ND) 

825 (TL NIL)) 

326 ((NULL NL) (AND TL (TMS-TMP TL))) 

327 (DO (US (TMS-SL-JUSTIFICATIONS (CAR ND) (CDR JS)) 

328 (CJS (TMS-CP-JUSTIFICATIONS (CAR NL)))) 

329 ((NULL JS)) 

338 (LET ((JUST (CAR JS))) 

031 (COND ((AND (NULL (TMS-SL-JUSTIFICATION-INLIST JUST)) 

032 (NULL (THS-SL-JUSTIFICATION-OUTLIST JUST)) 

033 (NOT (DO ((CS CJS (COR CS))) 

034 ((NULL CS)) 

03 * (AND (EQ (TNS-JUSTIFICATION-ARGUMENT JUST) 

11% (TMS-JUSTIFICATION-ARGUMENT (CAR CS))) 

037 (RETURN T))))) 

03 5 (flN D <M JUST (THS-SUPPORTING-JUSTIFICATION (CAR NL))) 

039 (PUSH (CAR NL) TL)) 

040 (MAKE (TMS-SL-JUSTIFICATIONS (CAR ND) 

041 (DELQ JUST (TMS-SL-JUSTIFICATIONS (CAR ND))) )))))) 
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(COMMENT TRUTH MAINTENANCE PROCESSING FUNCTIONS) 
THE TRUTH MAINTENANCE PROCESSOR: 

TRUTH MAINTENANCE PROCESSING OCCURS WHEN THE SUPPORT STATUS 
OF A NODE IS CHANGED. THE MAINTENANCE PROCESSING IS 
INITIATED BY CALLING TMS-TMP UITH THE LIST OF NOOES IN 
QUESTION. 

THERE ARE TUO PHASES TO THE TRUTH MAINTENANCE PROCESS. 

THE FIRST PHASE CONSISTS OF LOOKING FOR WELL-FOUNDED SUPPORT FOR 

ALL NODES INVOLVED IN TRUTH MAINTENANCE. SOME NOOES MAY BE LEFT 

WITH THEIR STATUS STILL NOT DETERMINED AT THE END OF THIS PHASE. 

THE SECOND PHASE IS A RELAXATION PROCESS IN WHICH "NOT-WELL-FOUNDED" (NUF) 

SUPPORT IS DERIVEO FOR ALL REMAINING NODES. THIS INVOLVES CHECKING 

FOR SUPPORT UNDER THE ASSUMPTION THAT ALL NODES WITHOUT WELL-FOUNDED 

SUPPORT ARE OUT. THIS MAY BE DISCOVERED TO BE IN ERROR BY SUBSEQUENTLY 

;; DERIVING SUPPORT FOR A NODE ASSUMED TO BE OUT, CAUSING FURTHER TRUTH 

;; MAINTENANCE UNTIL THE DATA BASE RELAXES TO A STABLE STATE. 

(DEFUN TMS-TMP (NODELIST) 

(COND (*TMS-SEE-TMP-SW# 
(TERPRI) 

(PRINC > |TRUTH MAINTENANCE PROCESSING INITIATEO|) 
(COND UTMS-SEE-TMP-INVOKER-SW* 

(COND ((NULL (CDR NODELIST)) jj; JUST ONE INVOKER 

(PRINC ' | BY |) 

(PR INI (TMS-EXTERNRL-NAME (CAR NODELIST))))))) 
(PRINC ' |-l>>> 
(SETQ *TMS-PROCESS-QUEUE* NIL) 
(LET ((NOTEO-NODES (MAPCAN ' TMS-MARK-AFFECTED-CONSEQUENCES NODELIST))) 

(DO ((N (TMS-DEQUEUE) (TMS-DEQUEUE))) ;;; FIRST GROVEL FOR SURE STUFF 

((NULL N>) 

(AND (NULL (TMS-SUPPORT-STATUS N)) (TMS-WF-EXAMINE N))) 
(DO ((NL NOTED-NODES (CDR NL))) ;;; FIND LINGERERS 

((NULL ND) 

(OR (TMS-SUPPORT-STATUS (CAR ND) (THS-QUEUE (CAR NL)))) 
(DO ((N (TMS-DEQUEUE) (TMS-DEQUEUE))) ;;; THEN GROVEL DOUBTFUL STUFF 

((NULL N)) 

(AND (NULL (TMS-SUPPORT-STATUS N)) (TMS-NUF-EXAMNE N))) 
(MAPC '(LAMBDA (N) j;j CHECK FOR BUGS IN TTIS 

(COND ((NULL (TMS-SUPPORT-STATUS N)) 
(PRINT (TMS-EXTERNAL-NAME N)) 
(BREAK | NULL TMS ERROR |)))) 
NOTED-NODES) 
(COND UTHS-SEE-TMP-SW* 

(LET ((BASE 10.) UNOPOINT T)) (PRINT (LENGTH NOTEO-NODES))) 
(PRINC * I NODES EXAMINED. I ))))) 
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001 

002 ;;; THIS UGLY LOOP SCANS THE LIST OF NODES INVOLVED TO SEE IF ANY ARE NOW ACTIVE 

003 ;;; CONTRADICTIONS, OR ARE CP CONSEQUENCES UHICH CAN BE USED TO DERIVE NEU FINDINDEP'EO 

004 ;;; SL JUSTIFICATIONS. IF ANY ARE FOUND, THS PROCESSING HAY OCCUR, IN UHICH CASE 

005 ; ; ■ the SCAN MUST BE RESTARTED. 
006 

007 ;;;CP 

008 (DEFUN TflS-TflP-SCAN 

009 (PROG () 

010 LOOP ,;; SIGH... 

011 ;;; THIS CLAUSE CHECKS FOR CONTRADICTIONS AtlONG NOTED NODES. 

012 (AND (DO ((NL *TriS-NOTEO-IN-NOOES* (COR NL>>> 

013 ((NULL NL>> 

014 (LET ((N (CAR NL))) 

015 (COND ((AND (THS-IS-IN N) ;;; THIS TEST IS NOT REDUNDANT!?! 

016 ;n ♦THS-NOTED-IN-NODES* CONTAINS NODES 

017 ; n UHICH UERE IN UPON ENTRY TO THE 

018 ;;; THS. THEY HAY NOT BE IN NOU. 

019 (THS-CONTRADICTION-nARK N) 

020 (EQ (THS-PROCESS-CONTRADICTION1 

021 (TUS-CONTRADICTION-NArtE N) N 

022 (THS-CONTRADICTION-TYPE N) NIL) 

023 'FOUND-A-CULPRIT)) 

024 (RETURN T))))) 

025 (GO LOOP)) 

026 ;;; THIS CLAUSE CHECKS FOR CONTRADICTIONS AMONG NOTEO NODES. 

027 (AND (DO ((NL *TMS-NOTED-OUT-NOOES* (CDR NL))) 

028 ((NULL ND) 

029 (LET ((N (CAR NL))) 

030 (COND ((AND (THS-IS-IN N) 

031 (THS-CONTRADICTION-MARK N) 

032 (EQ (THS-PROCESS-CONTRADICTIONi 

033 (TtlS-CONTRADICTION-NAriE N) N 

034 (THS-CONTRAOICTION-TYPE N) NIL) 
835 'FOUND-A-CULPRIT)) 

036 (RETURN T))))) 

037 (GO LOOP)) 

038 ;;; THIS CLAUSE CHECKS FOR THE OPPORTUNITY TO HAKE NEU SUPPORT-LIST 

039 ;;; JUSTIFICATIONS FROU NEULY INNED CONSEQUENTS OF CONDITIONAL PROOFS. 

040 (AND (DO ((NL *MS-NOTED-IN-NODES* (CDR NL))) 

041 ((NULL ND) 

042 (LET ((N (CAR NL))) 

043 (AND (TflS-IS-IN N) 

044 (TflS-CHECK-CP-CONSEQUENCES N) 

045 (RETURN T)))) 

046 (GO LOOP)) 

047 m THIS CLAUSE CHECKS FOR THE OPPORTUNITY TO HAKE NEU SUPPORT-LIST 

048 ;;; JUSTIFICATIONS FROfl NEULY INNED CONSEQUENTS OF CONDITIONAL PROOFS. 

049 (AND (DO ((NL *THS-NOTED-OUT-NODES« (CDR NL))) 

050 ((NULL ND) 

051 (LET ((N (CAR ND)) 

052 (AND (THS-IS-IN N) 

053 (TflS-CHECK-CP-CONSEQUENCES N) 

054 (RETURN T)))) 

055 (GO LOOP)))) 
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081 

882 ;;; TMS-CHECK-CP-CONSEQUENCES REOERIVES SUPPORT FOR CONDITIONALLY PROVEN NOOES 

883 ;;; UHENEVER THE CONSEQUENT OF ONE OF THEIR CONDITIONRL-PROOF JUSTIFICATIONS 

884 ;;; COflES IN. 
885 

086 * * * CP 

887 (DEFUN TMS-CHECK-CP-CONSEQUENCES (NOOE) 

888 (PROG (CHANGEO) 

889 (MAPC '(LAMBDA (CPN) 

818 (MAPC '(LAMBDA (JUST) 

811 (COND ((RND (EQ NODE (TMS-CP-JUSTIFICATION-CONSEQUENT JUST)) 

812 (TMS-UF-IN (TMS-CP-JUSTIFICATION-IN-HYPOTHESES JUST)) 

813 (TMS-UF-OUT (THS-CP- JUSTIFICATION-OUT-HYPOTHESES JUST))) 

814 (LET ((SUPPORT 

815 (TflS-FINDINDEP 

816 NODE 

817 (TMS-CP-JUSTIFICATION-IN-HYPOTHESES JUST) 

818 (TMS-CP-JUSTIFICATION-OUT-HYPOTHESES JUST)))) 

819 (RNO (TMS-SL-JUSTIFYi CPN 

828 (CRR SUPPORT) 

821 (CDR SUPPORT) 

022 (THS-JUSTIFICRTION-ARGUMENT JUST)) 

023 (SETQ CHANGED T)))))) 

024 (TMS-CP-JUSTIFICATIONS CPN))) 

025 (TMS-CP-CONSEQUENT-LIST NODE)) 

026 CHANGED)) 
027 

028 ;;; THIS FUNCTION CHECKS THE NOOES INVOLVEO IN TRUTH MAINTENANCE TO SEE IF ANY 

029 ; ; ; HAVE CHRNGED IN STRTUS RND SHOULD BE SIGNALLED, 

030 ;;; IT IS IMPORTANT THAT TMS-SIGNAL-STATUS-CHANGE DOES NOT CAUSE 

031 ;;; FURTHER TRUTH MAINTENANCE UNTIL THE FOLLOWING LOOP IS COMPLETED. 
032 

033 (DEFUN TMS-SIGNAL-CHANGES () 

034 (I1APC '(LAMBOA (N) 

035 (TMS-SIGNAL-STATUS-CHANGE N 'IN (TMS-SUPPORT-STATUS N) ) 

036 (HAKE (TMS-NOTED-MARK N) NIL)) 

037 *TMS-NOTED-IN-NODES*) 

038 (SETQ *TflS-NOTEO-IN-NODES» NIL) 

039 (HAPC ' (LAMBDA (N) 

040 (TMS-SIGNAL-STATUS-CHANGE N 'OUT (THS-SUPPORT-STATUS N)) 

041 (HAKE (TOS-NOTED-riARK N) NIL)) 

042 *TriS-NOTED-OUT-NOOES*) 

043 (SETQ *Tf1S-NOTED-OUT-NODES* NIL)) 
044 

045 ;;; STIMULATE AND DESTIMULATE SHOULD BE SUPPLIED BY THE USER AS THE 

046 ;;; DEFAULT SIGNAL-RECALLING AND SIGNAL-FORGETTING FUNCTIONS. 

047 ;;; THE SIGNAL-RECALLING AND SIGNAL-FORGETTING FUNCTIONS CAN ALSO BE 

048 ;;; SET INDIVIDUALLY. THESE MAY ALSO BE THE ATOM 'IGNORE, IN HHICH 

049 ; ; j CASE THE CHANGE WILL BE IGNORED. 
050 

051 (DEFUN THS-SIGNAL-STATUS-CHANGE (NODE OLDSTATUS NEUSTATUS) 

052 (COND ((EQ OLDSTATUS NEUSTATUS)) 

053 ((EQ NEUSTATUS 'IN) 

054 (LET ((RF (TMS-SIGNAL-RECALLING-FUNCTION NODE))) 

055 (COND ((NULL RF) (STIMULATE (TMS-EXTERNAL-NAME NODE))) 

056 ((EQ RF 'IGNORE)) 

057 (T (FUNCALL RF (TMS-EXTERNAL-NAME NODE)))))) 

058 ((EQ NEUSTATUS 'OUT) 

059 (LET ((FF (TMS-SIGNAL-FORGETTING-FUNCTION NODE))) 

060 (COND ((NULL FF) (DESTIMULATE (TMS-EXTERNAL-NAME NODE))) 

061 ((EQ FF 'IGNORE)) 

062 (T (FUNCALL FF (TMS-EXTERNAL-NAME NOOE)))))) 

063 (T (ERROR 'TMS-SIGNAL-STATUS-CHANGE NODE 'URNG-TYPE-flRG)))) 
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THE FOLLOUING FUNCTIONS PERFORM THE PROCESS QUEUE flfllNTENRNCE OPERRTIONS. 
THE POSSIBLE CONDITIONS OF R NODE RRE RS FOLLOWS: 

IF THE TflS-NOTED-flRRK IS NIL, THEN THE NOOE HAS NOT BEEN EXflfllNED BY THE TfIS 
IF THE TflS-STRTUS IS NON-NIL, THEN THE NOOE IS QUEUED FOR TfIS PROCESSING. 



(DEFUN TflS-QUEUE (NODE) 

(CONO ((NOT (TflS-TMP-flARK NODE)) 
(OR (TflS-NOTED-MARK NOOE) 

(ERROR »| NON-NOTED NOOE IN TflS-QUEUE | NODE 'URNG-TYPE-ARG)) 
(MAKE (TMS-TMP-MARK NODE) T) 
(PUSH NOOE ♦TMS-PROCESS-QUEUE*)))) 

(DEFUN TflS-DEQUEUE () 

(LET ((NODE (POP *TMS-PROCESS-QUEUE») ) ) 
(COND (NODE 

(MAKE (TMS-TMP-MARK NODE) NIL) 
NODE)))) 

THIS FUNCTION WORKS RND QUEUES RLL NODES MHICH fllGHT BE 

RFFECTEO BY THE CHANGE OF SUPPORT STRTUS OF THE ARGUMENT NODE. 

THE STRTUS OF THE NOOE BEFORE THE THS PROCESSING IS ALSO NOTEO 

TO ALLOW NOTIFICATION OF STATUS CHANGES AT THE CONCLUSION OF TfIS PROCESSING. 

(DEFUN TMS-MARK-AFFECTED-CONSEQUENCES (NOOE) 
(COND ((NOT (TMS-TMP-MARK NODE)) 

(COND ((NULL (TMS-NOTED-MARK NODE)) 

(HAKE (TMS-NOTED-MARK NOOE) T) 
(EQCASE (TMS-SUPPORT-STATUS NODE) 

(IN (PUSH NODE *TnS-NOTED-IN-NOOES*)) 
(OUT (PUSH NOOE *TMS-NOTED-OUT-NOOES») ) 

(ELSE (ERROR '|STATUSLESS NODE IN TflS-WARK-AFFECTEO-CONSEQUENCES | 
NODE 

'URNG-TYPE-ARG))))) 
(MAKE (TflS-SUPPORT-STATUS NOOE) NIL) 
(HAKE (TMS-SUPPORTING-JUSTIFICATION NODE) NIL) 
(MAKE (TflS-SUPPORTING-NOOES NODE) NIL) 
(TflS-QUEUE NODE) 
(CONS NODE (flAPCAN 'TMS-MARK-AFFECTED-CONSEQUENCES 

(TMS-AFFECTEO-CQNSEQUENCES NOOE)))))) 
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(COfWENT SUPPORT-CHECKING FUNCTIONS) 

;;; TflS-WF-EXAfllNE RECURSIVELY CHECKS NODES FOR UELL-FOUNOED SUPPORT. 

;;; THRT IS, IF IT FINDS WELL-FOUNDED SUPPORT FOR R NODE, IT QUEUES UP THE 

;;; CONSEQUENCES OF THE NODE WHICH STILL RRE LACKING WELL-FOUNDED SUPPORT 

US TO SEE IF SUCH SUPPORT CRN NOW BE DERIVEO. 

(DEFUN TMS-WF-EXnniNE (NODE) 

(LET ((NEWSTRTUS (TMS-WF-STRTUS NODE))) 
(COND (NEWSTRTUS 

(COND ((EQ NEWSTRTUS ' IN) (flAKE (TflS-SUPPORT-STRTUS NODE) 'IN)) 

(T (HAKE (TflS-SUPPORT-STRTUS NOOE) 'OUT))) 
(TflS-INSTALL-WF-SUPPORT NOOE) 

(HRPC '(LAflBDA (C) (OR (TflS-SUPPORT-STRTUS C) (THS-QUEUE C>>> 
(TflS-CONSEQUENCES NODE)))))) 

?U TflS-NWF-EXAMNE SELECTS DUBIOUS SUPPORT FOR R NODE. 

J!J IT CHECKS FOR SUPPORT UNDER THE ASSUflPTION THRT ANY NOOES WITHOUT 
WELL-FOUNDED SUPPORT flENTIONEO IN JUSTIFICATIONS ARE OUT. 

PUT ANOTHER WAY, IT EVALUATES JUSTIFICATIONS UNDER THE RSSUflPTION THAT OUT • NIL 
IN SUPPORT-STATUSES FOR NODES. THIS RSSUflPTION flAY NOT BE RIGHT, 
AND THE NODE'S STATUS flAY LATER BE CHANGED IN THE RELAXATION PROCESS. 

(DEFUN TflS-NWF-EXAfllNE (NOOE) 

(OR (LET ((STATUS (THS-WF-STATUS NOOE))) 
(COND (STATUS 

(COND ((EQ STATUS 'IN) (flAKE (TrtS-SUPPORT-STATUS NODE) MN>> 

(T (HAKE (TflS-SUPPORT-STRTUS NODE) 'OUT))) 
(TflS-INSTALL-WF-SUPPORT NODE) 
(TflS-NWF-PROCESS-CONSEQUENCES NOOE STATUS) 
STATUS))) 
(LET ((STATUS (THS-NWF-STATUS NOOE))) 
(EQCASE STATUS 

(IN (HAKE (TflS-SUPPORT-STRTUS NODE) 'IN)) 
(OUT (HAKE (TflS-SUPPORT-STRTUS NODE) 'OUT))) 
(TMS-INSTALL-NWF-SUPPORT NOOE) 
(TflS-NWF-PROCESS-CONSEQUENCES NODE STATUS) 
STATUS) ) ) 

THIS FUNCTION CHECKS THE CONSEQUENCES OF NODES FOR WHICH DUBIOUS SUPPORT 
WAS DERIVED BY TflS-NWF-EXflfllNE. IT FIRST TRIES TO CHECK THEN FOR POSSIBLE 
WELL-FOUNDED SUPPORT, AND FAILING THAT, SUBfllTS THEN TO TNS-NUF-EXAMNE 

5U TO CHECK FOR DUBIOUS SUPPORT. 

;;; THIS OCCURS BECAUSE IT HAY BE IMPOSSIBLE TO FIND WELL-FOUNDEO SUPPORT 

;;; FOR A NODE EITHER BECAUSE IT IS INVOLVED IN A CIRCULARITY, OR BECAUSE 

IU IT DEPENDS UPON A NOOE WHICH IS INVOLVED IN A CIRCULARITY. 

(DEFUN TflS-NWF-PROCESS-CONSEQUENCES (NODE STATUS) 
(COND ((EQ STATUS 'IN) 

(HAPC '(LAflBDA (C) 

(COND ((NULL (TflS-SUPPORT-STRTUS O) (TflS-QUEUE O) 
((flEflQ NODE (TflS-SUPPORTING-NODES O) 
(THS-HARK-RFFECTEO-CONSEQUENCES C) ) ) ) 
(TflS-CONSEQUENCES NODE))) 
(T (flAPC '(LAflBDA (C) 

(OR (THS-SUPPORT-STATUS C) (THS-QUEUE C))) 
(THS-CONSEQUENCES NODE))))) 
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882 ;;;TMS-UF-STATUS COflPUTES THE UELL-FOUNDED SUPPORT STATUS OF 

883 ;;; R NODE FROfl BOTH ITS JUSTIFICATION SETS. 
884 

885 (OEFUN TMS-WF-STRTUS (NODE) 

886 (EQCRSE (TMS-UF-SL-SUPPORT NODE) 

887 (IN 'IN) 

888 (OUT (TMS-UF-CP-SUPPORT NOOE)) 

009 (ELSE (RNO (EQ (TMS-UF-CP-SUPPORT NOOE) 'IN) »IN)))) 
818 

811 ;;; TMS-UF-SL-SUPPORT COMPUTES THE UELL-FOUNDED SUPPORT-STATUS DERIVED 

812 ;;; FROM ITS SUPPORT-LIST JUSTIFICATION SET. 
813 

814 (DEFUN TMS-UF-SL-SUPPORT (NOOE) 

015 (DO (US (THS-SL-JUSTIFICATIONS NOOE) (COR JS)) 

816 (UF T)) 

817 ((NULL JS) (RNO UF 'OUT)) 

018 (EQCRSE (TMS-UF-EVRL-SL-JUSTIFICRTION (CAR JS)) 

019 (YES (RETURN 'IN)) 

020 (NO) 

021 (ELSE (SETQ UF NIL))))) 
022 

023 ; ? ; TMS-UF-CP-SUPPORT COMPUTES THE UELL-FOUNDEO SUPPORT-STATUS 

024 ;;; OERIVED FROM ITS CONDITIONAL-PROOF JUSTIFICATION SET. 
025 

026 ;;;CP 

027 (DEFUN TMS-UF-CP-SUPPORT (NOOE) 

028 (00 ((JS (TMS-CP-JUSTIFICRTIONS NOOE) (COR JS)) 

029 (UF T)) 

030 ((NULL JS) (RNO UF 'OUT)) 

031 (EQCRSE (TMS-UF-EVRL-CP-JUSTIFICRTION (CAR JS)) 

032 (YES (RETURN 'IN)) 

033 (NO) 

034 (ELSE (SETQ UF NIL))))) 
035 

036 ;;; TMS-UF-EVRL-SL-JUSTIFICRTION EVRLURTES RN SUPPORT-LIST JUSTIFICATION. 

037 5;; THIS MEANS CHECKING TO SEE IF THE JUSTIFICRTION IS VALID. 
038 

039 (DEFUN TMS-UF-EVRL-SL-JUSTIFICRTION (JUST) 

040 (EQCRSE (TMS-UF-IN (TMS-SL-JUSTIFICRTION-INLIST JUST)) 

0*1 (YES (TMS-UF-OUT (TMS-SL-JUSTIFICATION-OUTLIST JUST))) 

042 (NO 'NO) 

043 (ELSE NIL))) 
044 

045 ;;; TflS-UF-EVAL-CP-JUSTIFICATION EVALUATES A CONDITIONAL-PROOF JUSTIFICATION. 
046 

047 ;;;CP 

048 (DEFUN TMS-UF-EVRL-CP-JUSTIFICRTION (JUST) 

049 (EQCRSE (TMS-UF-IN (TMS-CP-JUSTIFICRTION-IN-HYPOTHESES JUST)) 

050 (YES (EQCRSE (TMS-UF-OUT (TMS-CP-JUSTIFICATION-OUT-HYPOTHESES JUST)) 

051 (YES (EQCASE (TMS-SUPPORT-STATUS 

852 (TMS-CP-JUSTIFICATION-CONSEQUENT JUST)) 

053 (IN 'YES) 

054 (OUT 'NO) 

055 (ELSE NIL))) 

056 (ELSE NIL))) 

057 (ELSE NIL))) 
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eei 

882 ;n TMS-UF-IN CHECKS fl LIST OF NODES FOR UELL-FOUNDED INNESS. 
883 

884 (DEFUN TMS-UF-IN (NOOELIST) 

885 (DO <<NL NOOELIST (COR NL>) 

886 (UF T)) 

887 ((NULL NL) (AND UF 'YES)) 

888 (EQCRSE (TMS-SUPPORT-STATUS (CAR NL)> 

889 (IN) 

818 (OUT (RETURN 'NO)) 

811 (ELSE (SETQ UF NIL))))) 

812 

813 ;;; TMS-UF-OUT CHECKS R LIST OF NODES FOR UELL-FOUNDEO OUTNESS. 

814 

815 (DEFUN TMS-UF-OUT (NOOELIST) 

816 (DO ((NL NOOELIST (COR ND) 

817 (UF T)) 

818 ((NULL NL) (RNO UF 'YES)) 

819 (EQCRSE (TMS-SUPPORT-STATUS (CRR ND) 
828 (IN (RETURN 'NO)) 

821 (OUT) 

822 (ELSE (SETQ UF NIL))))) 
823 

824 ; ; ; TMS-NUF-STATUS COMPUTES THE (PERHAPS UNFOUNDED) SUPPORT-STATUS OF A NOOE. 

825 ;;; THIS HERNS EVALUATING JUSTIFICATIONS, ETC- UNDER THE ASSUMPTION THAT 

826 ;;; A SUPPORT STATUS OF NIL IS EQUIVALENT TO A SUPPORT STATUS OF OUT. 
827 

828 (DEFUN TMS-NUF-STATUS (NODE) 

829 (EQCASE (TflS-NUF-SL-SUPPORT NOOE) 
838 (IN 'IN) 

831 (OUT (EQCASE (TMS-UF-CP-SUPPORT NOOE) 

832 (IN (ERROR ' TMS-NUF-STATUS NODE »URNG-TYPE-ARG) 'OUT) 

833 (OUT 'OUT) 

834 (ELSE 'OUT))))) 
835 

836 ; ; ; TMS-NUF-SL-SUPPORT COMPUTES THE SUPPORT-STATUS OF A NODE FROM ITS 

837 ;;; SUPPORT-LIST JUSTIFICATION SET BY EQUATING 'OUT ANO NIL. 

838 ;;; ITS SUBFUNCTIONS ARE ANALOGOUS TO THE UELL-FOUNDED CASE FUNCTIONS ABOVE. 
839 

848 (DEFUN TMS-NUF-SL-SUPPORT (NODE) 

841 (DO (US (TMS-SL-JUSTIFICATIONS NOOE) (COR JS))) 

842 ((NULL JS) 'OUT) 

843 (AND (TMS-NUF-EVAL-SL-JUSTIFICATION (CAR JS)) 

844 (RETURN 'IN)))) 
845 

846 (DEFUN TMS-NUF-EVAL-SL-JUSTIFICATION (JUST) 

847 (AND (TMS-NUF-IN (TMS-SL-JUSTIFICATION-INLIST JUST)) 

848 (TMS-NUF-OUT (TMS-SL-JUSTIFICATION-OUTLIST JUST)))) 
849 

858 (DEFUN TMS-NUF-IN (NOOELIST) 

851 (DO ((NL NOOELIST (COR NL))) 

852 ((NULL NL) T) 

853 (OR (TMS-IS-IN (CAR ND) (RETURN NIL)))) 
854 

855 (DEFUN TMS-NUF-OUT (NOOELIST) 

856 (00 ((NL NOOELIST (COR ND)) 

857 ((NULL NL) T) 

058 (AND (TMS-IS-IN (CAR ND) (RETURN NIL)))) 
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(COMMENT SUPPORT-EXTRRCTION FUNCTIONS) 



HI THIS FUNCTION IS COMPLETELY HRIRY RS IT TRIES TO FIRST CHECK TO SEE IF 
;;; ANY NEU SL JUSTIFICATIONS CRN BE DERIVED FROM CP JUSTIFICATIONS, 

IT THEN INSTALLS THE FIRST VALID SL JUSTIFICATION IT CAN FINO AS THE 
SUPPORTING-JUSTIFICATION OF THE NOOE, AND EXTRACTS THE APPROPRIATE 
SUPPORTING NODES, 
j; THERE IS A CRUCIAL TIME OROERING USED HERE. 

RATHER THAN HAVING THE FUNCTIONS UHICH CHECK THE SET OF JUSTIFICATIONS 
; FOR A VALID JUSTIFICATION RETURN THAT JUSTIFICATION, THIS PROGRAM MAKES 
; SURE THAT THAT CHECKING OF THE JUSTIFICATION SETS IS DONE IN A PARTICULAR 
ORDER (SL-JUSTIFICATIONS FIRST, THEN CP-JUSTIFICATIONS.) 
THE REASON FOR THIS IS THAT THE EXTRACTION ROUTINES BELOU, UHICH COMPUTE 
A HOPEFULLY MINIMAL SET OF NODES MHICH DETERMINE THE SUPPORT STATUS 
;;; OF THE CURRENT NODE (EITHER IN OR OUT). THE DECISION OF UHICH SET TO 
EXTRACT DEPENDS UPON UHETHER THE NOOE IS IN OR OUT. 
THUS THE STATUS CHECKING FUNCTIONS ABOVE COMPUTE NO SUPPORT SETS. 
THIS TASK IS LEFT TO THE FOLLOUING FUNCTIONS. 
TMS-INSTALL-UF-SUPPORT USES THE FIRST VALID JUSTIFICATION FOUND 
IN A REPETITIVE CHECKING OF THE JUSTIFICATION SETS AS THE SUPPORTING 
JUSTIFICATION, SINCE THIS IS THE FIRST VALIO JUSTIFICATION UHICH UAS ENCOUNTERED 
BY THE STATUS CHECKING ROUTINES. 

NOTE: THE LOGICAL NECESSITY OF THESE REPETITIVE CHECKS ALL OVER THE 
PLACE FOR OPPORTUNITIES TO DO FINDINDEPS SHOULD BE THOUGHT OUT 
CAREFULLY, AND THE CODE REORGANIZED. ALSO, THERE IS SOME 
j SUPERFLUOUS STUFF IN THE EXTRACTION FUNCTIONS BELOU. 

• : *CP 

(DEFUN TMS-INSTALL-UF-SUPPORT (NODE) 

(DO (US (TMS-CP-JUSTIFICATIONS NODE) (COR JS))) 
((NULL JS)) 

(EQCASE (TMS-UF-EVAL-CP-JUSTIFICATION (CAR JS)) 
(YES (LET ((SUPPORT (TMS-FINDINDEP 

(THS-CP-JUSTIFICATION-CONSEQUENT (CAR JS)) 
(TMS-CP-JUSTIFICATION-IN-HYPOTHESES (CAR JS)) 
(TMS-CP-JUSTIFICATION-OUT-HYPOTHESES (CAR JS))))) 
(LET ((JUST (TMS-MAKE-SL-JUSTIFICATION 
(CAR SUPPORT) 
(CDR SUPPORT) 

(TMS-JUSTIFICATION-ARGUMENT (CAR JS)))) 
(OJS (TMS-SL-JUSTIFICATIONS NOOE))) 
(AND (NOT (THS-SL-JUSTIFICATION-MEHBER JUST OJS)) 
(MAKE (TMS-SL-JUSTIFICATIONS NOOE) 
(NCONC OJS (LIST JUST))))))) 
(ELSE))) 
(DO ((JS (TMS-SL-JUSTIFICATIONS NOOE) (COR JS))) 
((NULL JS) 
(MAKE (TMS-SUPPORTING-JUSTIFICATION NODE) NIL) 
(MAKE (TMS-SUPPORTING-NODES NODE) 
(THS-NOOE-SET-CONDENSE 
(NCONC (MAPCAN '(LAMBDA (J) (TMS-UF-SL-JUSTIFICATION-EXTRACT J)) 
(TMS-SL-JUSTIFICATIONS NODE)) 
(MAPCAN '(LAMBDA (J) (THS-UF-CP-JUSTIFICATION-EXTRACT J)) 
(TMS-CP-JUSTIFICATIONS NODE) ) ) ) ) ) 
(EQCASE (THS-UF-EVAL-SL-JUSTIFICATION (CAR JS)) 

(YES (HAKE (TMS-SUPPORTING-JUSTIFICATION NODE) (CAR JS)) 
(MAKE (TMS-SUPPORTING-NODES NODE) 

(APPEND (TMS-SL-JUSTIFICATION-INLIST (CAR JS)) 
(TMS-SL-JUSTIFICATION-OUTLIST (CAR JS)) 
NIL)) 
(RETURN NIL)) 
(ELSE)))) 



THESE FUNCTIONS ARE USED TO EXTRRCT fl HOPEFULLY SHRLL SET OF NODES AS THE 
SET OF SUPPORTING NODES OF THE NODE. THE EXTRRCTEO NODES RRE ONES THRT MUST 
BE CHRNCED TO RFFECT THE STATUS OF THE SUPPORTED NODE. 
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081 

882 ;;; IF THE NOOE IS BEING GIVEN DUBIOUS SUPPORT BY THE NOT-UELL-FOUNDED 

883 ;;; RELAXATION PROCESS, THIS FUNCTION IS USED INSTERO OF TMS-INSTALL-UF-SUPPORT. 
884 

885 (DEFUN TMS-INSTALL-NUF-SUPPORT (NODE) 

886 (DO (US (TMS-SL-JUSTIFICATIONS NODE) (COR JS))) 

887 ((NULL JS) 

888 (HAKE (TMS-SUPPORTING-JUSTIFICATION NODE) NIL) 

889 (HAKE (TMS-SUPPORTING-NODES NODE) 
818 (TMS-NOOE-SET-CONDENSE 

811 (NCONC 

812 (MAPCAN '(LAMBDA (J) (TMS-NUF-SL-JUSTIFICATION-EXTRACT J)) 

813 (TflS-SL-JUSTIFICATIONS NODE)) 

814 (MAPCAN '(LAMBOA (J) (TMS-NUF-CP-JUSTIFICATION-EXTRACT J)) 

815 (TMS-CP-JUSTIFICATIONS NODE)))))) 

816 (COND ((TMS-NUF-EVAL-SL-JUSTIFICATION (CAR JS)) 

817 (HAKE (TMS-SUPPORTING-JUSTIFICATION NODE) (CAR JS)) 

818 (HAKE (TMS-SUPPORTING-NODES NOOE) 

819 (TMS-NOOE-SET-CONDENSE (THS-NUF-SL-JUSTIFICATION-EXTRACT (CAR JS)))) 
828 (RETURN NIL))))) 

821 
822 
823 
824 
825 

826 ;;; IF THE JUSTIFICATION IS VALID, THIS RETURNS THE UNION OF THE IN AND OUT SETS OF NOOES 

827 ;j; MENTIONEO IN THE JUSTIFICATION. IF THE JUSTIFICATION IS INVALIO, IT RETURNS EITHER 

828 ;;; AN OUT NODE FROM THE INLIST, OR R IN NOOE FROM THE OUTLIST. 
829 

838 (DEFUN TMS-UF-SL-JUSTIFICATION-EXTRACT (JUST) 

831 (EQCASE (TMS-MF-IN (TMS-SL-JUSTIFICATION-INLIST JUST)) 

832 (YES (EQCASE (TMS-UF-OUT (THS-SL-JUSTIFICATION-OUTLIST JUST)) 

833 (YES (APPEND (TMS-SL-JUSTIFICATION-INLIST JUST) 

834 (TMS-SL-JUSTIFICATION-OUTLIST JUST) 

835 NIL)) 

836 (NO (TMS-UF-OUT-EXTRRCT (TMS-SL-JUSTIFICATION-OUTLIST JUST))) 

837 (ELSE NIL))) 

838 (NO (TMS-UF-IN-EXTRACT (TMS-SL-JUSTIFICATION-INLIST JUST))) 

839 (ELSE NIL))) 
848 

841 ;;; I DON'T KNOU WHAT THIS DOES ANYMORE. 
842 

843 ,j;CP 

844 (DEFUN TMS-MF-CP-JUSTIFICAT ION-EXTRACT (JUST) 

845 (EQCASE (TMS-UF-IN (TMS-CP-JUSTIFICATION-IN-HYPOTHESES JUST)) 

846 (YES (EQCASE (TMS-UF-OUT (TMS-CP-JUSTIFICATION-OUT-HYPOTHESES JUST)) 

847 (YES (EQCASE (TMS-SUPPORT-STRTUS 

8 \ (THS-CP-JUSTIFICATION-CONSEQUENT JUST)) 

843 (IN (ERROR »TMS-NF-CP-JUSTIFICRTION-EXTRflCT 

858 JUST 'URNG-TYPE-RRG) NIL) 

851 (OUT (LIST (TMS-CP-JUSTIFICflTION-CONSEQUENT JUST))) 

852 (ELSE NIL))) 

853 (NO (ERROR 'TMS-UF-CP-JUSTIFICATION-EXTRACT-OUTS 

854 JUST 'URNG-TYPE-RRG) NIL) 

855 (ELSE NIL))) 

856 (NO (ERROR 'THS-UF-CP-JUSTIFICRTION-EXTRACT-INS JUST 'MRNG-TYPE-ARG) NIL) 

857 (ELSE NIL))) 
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"eel — — " — 

ee2 ;;; THIS RETURNS THE ENTIRE LIST OF NODES IF RLL ARE IN, 

803 ;;; OR THE FIRST OUT NODE IF THERE IS ONE. 

884 

065 (DEFUN TflS-UF-IN-EXTRACT (NOOELIST) 

006 (DO ((NL NODELIST (CDR NL>> 

007 (UF T)) 

ee8 ((NULL NL) (RND MF (RPPEND NODELIST NIL))) 

009 (EQCRSE (TflS-SUPPORT-STATUS (CAR ND) 

eie (IN) 

eii (OUT (RETURN (LIST (CRR NL)))) 

012 (ELSE (SETQ UF NIL))))) 

813 

014 ;;; THIS RETURNS THE ENTIRE LIST OF NODES IF RLL RRE OUT, 

015 ;;; OR THE FIRST IN NODE IF THERE IS ONE. 
816 

017 (DEFUN TflS-UF-OUT-EXTRACT (NOOELIST) 

018 (DO ((NL NODELIST (CDR HI)) 

019 (UF T)) 

020 ((NULL NL) (RND UF (APPEND NODELIST NIL))) 

021 (EQCASE (TMS-SUPPORT-STATUS (CAR ND) 
e22 (IN (RETURN (LIST (CAR NL)))) 

023 (OUT) 

024 (ELSE (SETQ UF NIL))))) 
025 

026 ;;; THESE FUNCTIONS ARE ANALOGOUS TO THE CORRESPONDING UELL-FOUNOED CASE FUNCTIONS ABOVE. 

027 ; 5; THE ONLY REAL DIFFERENCE IS THAT NIL IS CONSIDERED OUT IN SUPPORT STATUSES. 
028 

029 (DEFUN TMS-NUF-SL-JUSTIFICATION-EXTRACT (JUST) 

030 (COND ((TflS-NUF-IN (TflS-SL-JUSTIFICATION-INLIST JUST)) 

331 (COND ( (TflS-NUF-OUT (TflS-SL-JUSTIFICATION-OUTLIST JUST)) 

832 (APPEND (TflS-SL-JUSTIFICATION-INLIST JUST) 

W3 (TflS-SL-JUSTIFICATION-OUTLIST JUST) 

834 NIL)) 

835 (T (TflS-NUF-OUT-EXTRACT (TflS-SL-JUSTIFICATION-OUTLIST JUST))))) 

836 (T (TrtS-NUF-IN-EXTRACT (TflS-SL-JUSTIFICATION-INLIST JUST))))) 
037 

038 ;;;CP 

039 (DEFUN THS-NUF-CP-JUSTIFICATION-EXTRACT (JUST) 

040 (COND ((TflS-NUF-IN (TflS-CP-JUSTIFICATION-IN-HYPOTHESES JUST)) 

841 (COND ( (TflS-NUF-OUT (TflS-CP-JUSTIFICAT ION-OUT-HYPOTHESES JUST)) 

842 (COND ((TttS-IS-IN (TtlS-CP-JUSTIFICATION-CONSEQUENT JUST)) 

843 (APPEND (TflS-CP-JUSTIFICATION-IN-HYPOTHESES JUST) 

844 (TflS-CP-JUSTIFICATION-OUT-HYPOTHESES JUST) 

845 (LIST (TftS-CP-JUSTIFICATION-CONSEQUENT JUST)))) 

846 (T (LIST (TflS-CP-JUSTIFICATION-CONSEQUENT JUST))))) 

847 (T (TftS-NUF-OUT-EXTRACT (TflS-CP-JUSTIFICATION-OUT-HYPOTHESES JUST))))) 

848 (T (TflS-NUF-IN-EXTRACT (TMS-CP-JUSTIFICATION-IN-HYPOTHESES JUST))))) 
049 

050 (DEFUN TflS-NUF-IN-EXTRACT (NOOELIST) 

851 (DO ((NL NODELIST (CDR NL))) 

852 ((NULL NL) (APPEND NOOELIST NIL)) 

853 (OR (TflS-IS-IN (CAR ND) (RETURN (LIST (CAR NL)))))) 
054 

055 (DEFUN TflS-NUF-OUT-EXTRACT (NODELIST) 

856 (DO ((NL NOOELIST (CDR ND)) 

857 ((NULL NL) (APPEND NOOELIST NIL)) 

858 (AND (THS-IS-IN (CAR ND) (RETURN (LIST (CAR ND))))) 
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CCOMMENT DEPENDENCY-DIRECTED BACKTRACKING SYSTEM) 

TMS-CONTRADICTION IS THE FUNDAMENTAL METHOD FOR DECLARING A SET 

A SET OF NOOES CONTRADICTORY. THE ARGUMENTS ARE A CONTRADICTION 

TYPE, UHICH IS A MNEMONIC SYMBOL, A LIST OF NODES TO BE USED AS 

THE SUPPORT OF THE CONTRADICTION, AND THE EXTERNAL ARGUMENT FOR 
55 j THE CONTRADICTION, AS IN TMS-SL-JUSTIFY. THE FINAL ARGUMENT IS THE 
5;; CONTRADICTION FUNCTION TO BE CALLEO WHEN NO ASSUMPTIONS CAN BE FOUND. 

(DEFUN TMS-CONTRADICTION (CTYPE SUPPORT EXTARC CFUN) 

(LET ((CONT (TMS-MAKE-FACT 'CONTRADICTION "(, CTYPE CONTRADICTION)))) 
(LET ((CNODE (TMS-FACT-NODE CONT))) 

(TMS-SL-JUSTIFY CNODE SUPPORT NIL EXTARG) 
(TMS-PROCESS-CONTRADICTION CONT CNODE CTYPE CFUN) 
CNODE))) 

, M TMS-PROCESS-CONTRADICTION DIRECTS THE BACKTRACKING PROCESS, 

55; ITS ARGUMENTS ARE THE CONTRADICTION NAME, THE CONTRADICTION NODE, 

THE CONTRADICTION TYPE, AND THE CONTRADICTION FUNCTION. IF NO 

CONTRADICTION FUNCTION IS SUPPLIED, IT IS IGNORED. 

;;; THE THEORY OF BACKTRACKING IN THIS FUNCTION IS AS FOLLOWS: 

5 ; ; THERE ARE 4 FLAVORS OF NOOES AS FAR AS THE BACKTRACKER IS CONCERNED: 

555 ASSUMPTIONS — SUPERIORLESS IN NODES SUPPORTED BY OUT NODES. 

5 5 5 SUSPECTS — OUT NODES SUPPORTING ASSUMPTIONS. 

555 IN-SUPPORT — NOOES UHICH ARE IN INDEPENDENT OF ANY SUSPECTS. 

555 OUT-SUPPORT — NOOES UHICH ARE OUT INDEPENDENT OF ANY SUSPECTS. 

5 ; 5 BOTH TYPES OF INDEPENDENT SUPPORT ARE COLLECTED BY CALLING TMS-FINDINDEP 

555 ON THE CONTRADICTION AND THE LIST OF ASSUMPTIONS. 

55 5 *TnS-CONTRADICTION-ASSUMPTIONS* IS A LIST OF PAIRS OF ASSUMPTIONS AND THEIR SUSPECTS. 

(DEFUN TMS-PROCESS-CONTRADICTION (CONT CNODE CTYPE CFUN) 
(LET (UTMS-NOTED-IN-NODES* NIL) 

UTMS-NOTEO-OUT-NOOES* NIL)) 
(TMS-PR0CESS-C0NTRADICTI0N1 CONT CNODE CTYPE CFUN) 
(TMS-TMP-SCAN) 
(TMS-SIGNAL-CHANGES))) 

(DEFUN TMS-PR0CESS-C0NTRADICTI0N1 (CONT CNODE CTYPE CFUN) 
(MAKE (TMS-CONTRAOICTION-MARK CNODE) T) 
(MAKE (TMS-CONTRAOICTION-NAME CNODE) CONT) 
(MAKE (TMS-CONTRAOICTION-TYPE CNODE) CTYPE) 
(AND CFUN (MAKE (TMS-CONTRAOICTION-FUNCTION CNODE) CFUN)) 
(ANO (TMS-IS-IN CNODE) 

(LET (UTMS-CONTRADICTION-ASSUMPTIONS* NIL)) 
(COND ((TMS-FINDCHOICES CNOOE) 

(COND UTMS-SEE-CONTRADICTIONS-SU* 555 NOTIFY USER OF CONTRADICTION? 
(TERPRI) 

(PRINC 9 (CONTRADICTION: |) 
(PR INI CONT) 
(PRINC v ||) 
(PRIN1 CTYPE) 

(COND UTMS-SEE-CULPRITS-SU* 555 PRINT A LIST OF ALL RSSUHPTIONS? 
(TERPRI) 

(PRINC '|SUSPECTS: |) 
(MAPC '(LAMBDA (N) (TMS-PRINT »| | (CAR N)>> 

*TMS-CONTRADICTION-ASSUnPTIONS*> 
(TERPRI)) 
(T (PRINC '| |))) 
(PRINC '(CULPRIT: |) 
(PR INI (TMS-EXTERNAL-NAME 

(CAAR ♦TMS-CONTRADICTION-ASSUMPTIONS*))) 
(TERPRI))) 

5;; THE FOLLOUING UILL CAUSE TRUTH MAINTENANCE, AND UILL RESULT 
555 IN ONE OF THE ASSUMPTIONS OR CHOICES BEING CHANGED 
(TMS-CONTRAOICTION-ASSERT-NOGOOO CNOOE) 
'FOUND-A-CULPRIT) 

5 5 5 IP THERE UERE NO UNDERLYING ASSUMPTIONS FOUND, 

5;; CALL THE USER'S CONTRADICTION HANDLING FUNCTION IF IT EXISTS. 

(T (AND (TMS-CONTRAOICTION-FUNCTION CNOOE) 

(FUNCALL (TMS-CONTRAOICTION-FUNCTION CNODE) 
(TMS-EXTERNAL-NAME CNODE))) 
'FOUND-NO-CHOICES))))) 
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;; CONTRADICTION-ASSERT-NOGOOD HAKES UP THE NOGOOD FOR A GIVEN CONTRADICTION. 

NOGOODS ARE IMPLEMENTED AS DEPENDENCY RELATIONSHIPS, IN CONTRAST TO ARS, 
SO THAT NO EXPLICT NOGOOD CHECKING IS NECESSARY - THE TRUTH MAINTENANCE 
SYSTEM PERFORMS THAT TASK. THUS IT IS KNOUN THAT NO FORMER SUSPECTS 
THAT ARE OUT AT THE TIME OF A CONTRADICTION (OR ANY OTHER TIME) 
ARE IN CONFLICT WITH A NOGOOD SET, FOR A NOGOOD SET UOULD CAUSE A 
SUSPECT NODE TO BE IN. 

NOTE THAT OUTSIDE OF THE NOGOOD ITSELF, ONLY ONE NEU JUSTIFICATION IS 

CREATED FOR OUT NODES SUPPORTING ASSUMPTIONS. THE NEU JUSTIFICATION 

UILL NULLIFY THE CURRENT JUSTIFICATION OF THE FIRST ASSUMPTION ON THE LIST. 

IF THAT ASSUMPTION HAS NO OTHER VALID SUPPORT, IT HILL GO OUT AND THE CONTRADICTION 

SHOULD GO OUT AS WELL. IF THE ASSUMPTION IS STILL IN DUE TO OTHER SUPPORT, 

OR IF THE CONTRADICTION HAS OTHER SUPPORT, BACKTRACKING UILL BE INVOKED 

AGAIN BY THE TMS-TMP-SCAN LOOP. THUS OTHER NEU JUSTIFICATIONS MAY BE flDOEO 

LATER FOR THE OTHER ASSUMPTIONS SUPPORTING THE CONTRADICTION. 

(DEFUN TMS-CONTRADICTION-ASSERT-NOGOOD (CNODE) 

(LET ((AL (MAPCAR 'CAR *TMS-CONTRAOICTION-ASSUMPTIONS*>>> 
(LET ((NOGOODF 

(TMS-MAKE-FACT 
'NOGOOD 

"(NOGOOD . , (MAPCAR '(LAMBDA (N) (TMS-EXTERNAL-NAME N)) AL))))) 
(LET ((NOGOOD (TMS-FACT-NOOE NOGOODF))) 

(MAKE (TMS-NOGOOO-CONTRADICTION NOGOOD) CNODE) 
(MAKE (TMS-NOGOOD-ASSUMPTIONS NOGOOO) AL) 
(MAKE (TMS-CONTRADICTION-NOGOODS CNODE) 

(CONS NOGOOD (TMS-CONTRAOICTION-NOGOODS CNOOE))) 

;s;CP 

;;; THIS COULD BE REPLACED BY A CALL TO TMS-FINDINDEP TO CONSTRUCT A NEU JUSTIFICATION. 
(TMS-CP-JUSTIFY1 NOGOOO CNODE AL NIL 

"(NOGOOO FOR , (TMS-EXTERNAL-NAME CNODE))) 
(LET ((P (CAR *TMS-CONTRADICTION-ASSUHPTIONS)) 
(A (CAR AL))) 
(TMS-SL-JUSTIFY1 (CADR P) 

"(, NOGOOO t(DELQ A (APPEND AL NIL))) 

(CDDR P) 

"(CULPRIT , NOGOODF) )))))) 



TriS-FINDCHQICES HARKS THE SUPPORT OF fl CONTRADICTION TO FIND THE RELEVANT CHOICES, 
IT TRIES TO RETURN THE MAXIMAL ASSUMPTIONS. THESE ARE THE ASSUMPTIONS INVOLVED 
IN THE WELL-FOUNDED SUPPORT OF THE CONTRACTION ON WHICH NO OTHER ASSUMPTIONS 
IN THE WELL-FOUNDED SUPPORT DEPEND. THIS IS TO AVOIO THROWING AWAY MORE INFORMATION 
THAN IS NECESSARY. ALSO, IT IS PRAGMATICALLY USEFUL, SINCE THERE MAY NOT BE ENOUGH 
INFORMATION TO LOGICALLY RULE OUT A NON-MAXIMAL ASSUMPTION. THE RULING OUT OF THE 
ASSUMPTION MUST INVOLVE THE NODE THAT THE OTHER ASSUHTIONS ARE STILL IN: BUT IF THEY 
ARE SUPPORTED BY THE RULED-OUT ASSUMPTION, THEY WILL GO OUT ANO THE ASSUMPTION MILL 
NO LONGER BE RULED OUT. 
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882 
883 
884 
885 
886 
887 
888 
889 
818 
811 
812 ;;; THE TMS-SUPERIORS-MARK OF A NODE IS 

313 ;;; 'YES IF SOME CHOICE DEPENDS ON THE NODE 

314 ;;; 'NO IF NO CHOICE DEPENDS ON THE NODE 
815 ;;; NIL IF THE NODE HAS NOT BEEN MARKEO YET. 
816 

817 (DEFUN TMS-FINDCHOICES (NODE) 

818 (TMS-FINDCH0ICES1 NODE NIL) 
819 

®28 ; 5 5 THE FOLLOWING WEEDS OUT ANY SUBORDINATE ASSUMPTIONS SPURIOUSLY INCLUDED 
321 ;;; IN THE LIST DUE TO CHRONOLOGICAL ACCIDENTS IN TMS-FIN0CH0ICES1 
822 (SETQ *TMS-CONTRADICTION-ASSUMPTIONS« 

323 (HAPCAN '(LAMBDA (S) (AND (EQ (TMS-SUPERIORS-MARK (CAR S>> 'NO) (LIST S>>> 

324 *TMS-CONTRADICTION-ASSUHPTIONS») ) 
825 

326 ;;; CLEANUP THE MARKS MADE BY THS-FINDCH0ICES1 

827 (TMS-FINDCH0ICES2 NODE) 

828 

329 ;;;RETURN AN INDICATION OF WHETHER THERE WERE ANY ASSUMPTIONS. 

338 (NOT (NULL *TMS-CONTRAOICTION-ASSUMPTIONS*))) 

831 

832 (DEFUN TMS-FINDCH0ICES1 (NODE SUPERIORSP) 

333 ;,; SUPERIORSP IS WHETHER THE NODE HAS CHOICES ABOVE 

834 (EQCASE (TMS-SUPERIORS-MARK NODE) 

835 (YES) 

336 (NO (COND (SUPERIORSP ;;; REVISIONS MUST BE PROPAGATED DOWNWARDS- 

337 <HRKE (TMS-SUPERIORS-MARK NODE) 'YES) 

338 (HAPC '(LAMBDA (A) (TMS-FINDCH0ICES1 A SUPERIORSP)) 

339 (TMS-ANTECEOENTS NODE))))) 
848 (ELSE 

3*1 (COND (SUPERIORSP (MAKE (TMS-SUPERIORS-MARK NOOE) 'YES)) 

3*2 (T (MAKE (TMS-SUPERIORS-MARK NOOE) 'NO))) 

3*3 (LET ((OUT-SUPPORT (MAPCAN ' (LAMBDA (N) (AND (TMS-IS-OUT N) (LIST N>>> 

3** (TMS-ANTECEOENTS NODE)))) 

3*5 (AND OUT-SUPPORT 

3*6 (COND ((NOT SUPERIORSP) 

3* 7 ;;; ONLY SUPERIORLESS CHOICES ARE COLLECTED. 

3*8 ;;; THIS MAY COLLECT ASSUMPTIONS WHICH ARE SUBORDINATE. 

3*9 (SETQ SUPERIORSP T) 

358 (PUSH (CONS NODE OUT-SUPPORT) 

051 *TMS-CONTRADICTION-ASSUMPTIONS«) ) ) ) 

352 (HAPC '(LAMBDA (A) (TMS-FINDCH0ICES1 A SUPERIORSP)) 

353 (TMS-ANTECEOENTS NODE)))))) 
854 

855 (DEFUN TMS-FINDCH0ICES2 (NODE) 

356 (COND ((TMS-SUPERIORS-MARK NODE) 

357 (MAKE (TMS-SUPERIORS-MARK NODE) NIL) 

358 (MAPC 'THS-FINDCH0ICES2 (TMS-ANTECEDENTS NODE))))) 



CS-TR Scanning Project 

Document Control Form Date . J I ^ I "X 

Report # Al-TTrVMH 

Each of the following should be identified by a checkmark: 
Originating Department: 

^(Artificial Intellegence Laboratory (Al) 

□ Laboratory for Computer Science (LCS) 

Document Type: 

|2Crechnical Report (TR) □ Technical Memo (TM) 

□ Other: 

Document Information Number of pages: (ZUtf^-^ ^^J 

Not to include DOD forms, printer intstructions, etc... original pages only. 

Originals are: Intended to be printed as : 

^Single-sided or D Single-sided or 

□ Double-sided J^ Double-sided 

Print type: 

Q Typewriter □ Offset Press □ Laser Print 

□ InkJet Printer □ Unknown ^T Other: 

Check each if included with document: 

^£ DOD Form ^^ Funding Agent Form J^ Cover Page 

□ Spine □ Printers Notes D Photo negatives 

□ Other: 

Page Data: 

Blank Pages<byp«g«numb«): 



Photographs/Tonal Material (Wf-a* «««*«):. 



Other (note dascripCon/pag* numbw): 

Description : Page Number. 



^.NtsiKicr j\GrrJT z~li aPPjTPjx 3 



Scanning Agent Signoff: 

Date Received: 3 /&U C \C Date Scanned: JUJj3L Date Returned: JljJiJ-%£ 



Scanning Agent Signature:. 



/\AAA>Jhbd\ 7\j^M/< 



Rev 9/94 DS/LCS Document Control Form cs&fbrm.vsd 



SECURITY CLASSIFICATION OF THIS PAGE (When Dmtm Bnt*r»d) 



REPORT DOCUMENTATION PAGE 



1. REPORT NUMBER 

AI-TR-419 



2. GOVT ACCESSION NO. 



4. TITLE (and Subtitle) 

Truth Maintenance Systems for Problem Solv 



READ INSTRUCTIONS 
BEFORE COMPLETING FORM 



3. RECIPIENT'S CATALOG NUMBER 



ing 



7. AUTHORfs; 



Jon Doyle 



9. PERFORMING ORGANIZATION NAME AND ADDRESS 

Artificial Intelligence Laboratory 
5^5 Technology Square 
Cambridge, Massachusetts 02139 

11. CONTROLLING OFFICE NAME AND ADDRESS 

Advanced Research Projects Agency 
1400 Wilson Blvd 
Arlington, Virginia 22209 



U. MONITORING AGENCY NAME & ADDRESS^/ different from Control ling Office) 

Office of Naval Research 
Information Systems 
Arlington, Virginia 22217 



16. DISTRIBUTION STATEMENT (of this Report) 



5. TYPE OF REPORT & PERIOD COVERED 

Technical Report 



«. PERFORMING ORG. REPORT NUMBER 



• . CONTRACT OR GRANT NUMBERS) 

N00014-75-C-0643 



10. PROGRAM ELEMENT, PROJECT, TASK 
AREA * WORK UNIT NUMBERS 



12. REPORT DATE 

January 1 978 



13. NUMBER OF PAGES 

134 



15. SECURITY CLASS, (of thie report) 

UNCLASSIFIED 



15«. DECLASSIFI CATION/ DOWN GRADING 
SCHEDULE 



Distribution of this document is unlimited. 



17. DISTRIBUTION STATEMENT (of the mbetrmct entered tn Block 20, it different from Report) 



18. SUPPLEMENTARY NOTES 



None 



19. KEY WORDS (Continue on reverse aide if neceeemry end identify by block number) 



Artificial Intelligence 
Problem Solving 
Truth Maintenance 
Dependencies 



Logic 

Backtracking 
Explanation 
Hierarchy 



3. ABSTRACT (Continue on reveree aide it neceeemry end identity by block number) 

The thesis developed here is that reasoning programs which take care to 
record the logical justifications for program beliefs can apply several pow- 
erful but simple, domain- independent algorithms to 1) maintain the consist- 
ency of program beliefs, 2) realize substantial search efficiencies, and 
5) automatically summarize explanations of program beliefs. This report de- 
serves techniques for representing, recording, maintaining, and using justi- 
fications for beliefs. Also presented is an annotated implementation^ a 
domain- independent program. 



DD F0RM 



1 JAN 73 



1473 



EDITION OF 1 NOV 65 IS OBSOLETE 

S/N n m?-m a* *koi i 



Scanning Agent Identification Target 



Scanning of this document was supported in part by 
the Corporation for National Research Initiatives, 
using funds from the Advanced Research Projects 
Agency of the United states Government under 
Grant: MDA972-92-J1029. 



The scanning agent for this project was the 
Document Services department of the M.I.T 
Libraries. Technical support for this project was 
also provided by the M.I.T. Laboratory for 
Computer Sciences. 



V;; Scanned '■'.[ 

•';';; } ■ M.I.T. Libraries 
Document Services 



darptrgt.wpw Rev. 9/94 



